22112023_1843_38915[.]zip | Triage

Sharing

General

Target

22112023_1843_38915.zip
Size

619KB
MD5

6f1a01ea8b7d93c3afb2a2d0067db0a4
SHA1

5d9ae134c734fb517f6bcfa5fc81ead9a8cdf9c9
SHA256

f15e010cbf6fee5a0850351c3da82af01eb85ae9323494a22f958fe2f620c169
SHA512

f4f7b67bd68db6322e40fba3719e626b9748611881595fb0705dc8fae0e8b03da609a795f17a4fd413ea7ed9de7f8ec954d5ed7bc661e0a1c120331f589acc42
SSDEEP

12288:h+xr2+V3/MciprYQERDFiWHkCk3iKHRrKJya9pjCkaznPf2i/IxPQaEboPyt+NFL:h+xPDiBSB+C4wJ/8zm8gIa7ASHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/发票 389150.exe

Files

22112023_1843_38915.zip
.zip

Password: 5284
发票 389150.exe
.exe windows:4 windows x86 arch:x86

Password: 5284

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 594KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ