12508451278[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12508451278.zip
Size

444KB
MD5

9319bb7bf47622e301dae4df774350ec
SHA1

789b5e9dfb89d0f78e7ca5aadac80c7916a7704b
SHA256

64121b542780009ba79afc8da9598a1e42699405b67acb937d4772866fb6dc4e
SHA512

c2af493e8f55566be35da425c7ba1b0f9b85ffb8ab7980c3ef959c708ebc10c9974c942e6a5ff2bf473973697621de9343b2c2ec1d4be598350f65a22570349a
SSDEEP

12288:0bZnetIPJedTSLhf+0qwxMdRgmX094J4B:0m5SLhm0qwxMUH94g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KB4495667.pkg

Files

12508451278.zip
.zip
KB4495667.pkg
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
run.bat