SAMPLE SPECS 80470[.]IMG[.]lzh | Triage

Sharing

General

Target

SAMPLE SPECS 80470.IMG.lzh
Size

568KB
MD5

c041b0bdee70ee9f4f3f40d6e7c367ad
SHA1

4a334a31f259f3bcca66ebeeccbf913f749ed0ff
SHA256

d4b03adc9f43fdf72e1fdf48f76abd3a7404e91811cb91e0d6050631d8f9428e
SHA512

4dad8ffb10f9e4b5e7f930ea91240ca86a7cf1f25b998cdd89f2347aed463025d62542060c44957f9098f997c0125795224863b87959ed9a13225f0b71bd24b8
SSDEEP

12288:rkDR3xMefx0lX7+m4VFdoux/Onbj9Heu1cS+8s4B/9NNMkMoNm:r4De57aToht7+S+ANNM93

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SAMPLE SPECS 80470.IMG.exe

Files

SAMPLE SPECS 80470.IMG.lzh
.lzh
SAMPLE SPECS 80470.IMG.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 591KB - Virtual size: 591KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ