231108-1djk8sbqmx_pw_infected[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

231108-1djk8sbqmx_pw_infected.zip
Size

129KB
MD5

30f1de6cec24146efc809e03c582a36d
SHA1

b302240a54af69aec59602797a705470e0ca7dd1
SHA256

c5ca9c39e52bb5c6e84b13ee97740a8f2fe115ad9a4cc566ca33aeb832c8525a
SHA512

99ac8d6f85d0ba029d71c35e4261ae787d6190cbfdb1867f003efead6026b40feb15bd8fe3bfba3a3efcb2f7a7ae669109764dac22b8c51ab3462da5feea5e70
SSDEEP

3072:8M7lF2RSWBTlDrJcPSMimaEnGMMsyMDhKZLGDRc4uoE9NDYJ:8qkVBrJcasn5hKZLGGvU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b9093fb98f05afaa14266d11852710d529d6cee7becbf732a75f208bc60ceac3

Files

231108-1djk8sbqmx_pw_infected.zip
.zip

Password: infected
b9093fb98f05afaa14266d11852710d529d6cee7becbf732a75f208bc60ceac3
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ