13014263703[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13014263703.zip
Size

279KB
MD5

9e475ad21cd4c94949fe405985c57acb
SHA1

7e791e8ea43a99dc5480021b5dc661e1acb4f498
SHA256

eb65a2d720ee523990bef1b05a636ad8c68ffa1210764ae866835fc718e0dae4
SHA512

8a06e7a9d33f4e4aa77aeb5392788b21e9b3ce25e1389ed1693b4953929838b8fbeaef8715583e19107fb2c318ba4b8037db12f2141a6cad334cd52127b27bf5
SSDEEP

6144:rWPexe61TX+tiYGlHwrqm3GZb6uxEtfGiESxanWq74i4pCG5s6mJAU:rWP+e61Fq3GZdxsWOq74eG5s3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0c73e7f335880f4855b4a9c4acefb9bb547dedc27abdbe699ff2bdb353ca1a45

Files

13014263703.zip
.zip

Password: infected
0c73e7f335880f4855b4a9c4acefb9bb547dedc27abdbe699ff2bdb353ca1a45
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 780KB - Virtual size: 779KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ