aaa[.]zip | Triage

Sharing

General

Target

aaa.zip
Size

57KB
MD5

503c664d44bc7ea5eec7d2de00eb6e92
SHA1

3c18b12feabdb9eee91b42e44c685830218f7161
SHA256

7d3f377dccacaf1869d9710ef7f5e42ea9933e0039104deb4c217214af482355
SHA512

23f1ad59395654607629632f95740ce9d1e2581ebabd17b691357dff6cbb23d39759a57e7893924491d93b479c9e977cffa40fcfdcb0f6f3c82d26d15b59a1ac
SSDEEP

1536:zOEMOZDNvOH3uKWn5yF44A9MXGPnfLdqyr3f0YRhK:aEvRvKzkq44A9MWPfL3AYq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/aaa.exe

Files

aaa.zip
.zip

Password: infected
aaa.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ