inj-ES-sam[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

inj-ES-sam.zip
Size

513KB
MD5

1149a385c3d2573f2d5c5a4f2ca7fe30
SHA1

6d76797c3c7ea87d844ae89ac486b696f28e5a7c
SHA256

467d31afa8ceb0f44bb2db2386604eb823dedcdcbee752df251d7ee692a35beb
SHA512

199d33999b676825f5705c4c1e33f13ba5b236287ffd243b5b6a977d38bcdebfc682c442b1bceea8a0102b9e28307ca68f857e9eeeba813db7bd55a7378e0bf4
SSDEEP

12288:Vg8DHfla3JqY3kdiW8HGNnY9KujG6LijwhMFKySxyf5UTmGTIw:aqHfla3J93kp8gYQI5xhMDSx6Ra

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/99ddf18175733b699529f5f17659f80d58ffe602ba7836d3f43b540aa5337f84

Files

inj-ES-sam.zip
.zip

Password: infected
99ddf18175733b699529f5f17659f80d58ffe602ba7836d3f43b540aa5337f84
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 643KB - Virtual size: 642KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ