13559919649[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13559919649.zip
Size

607KB
MD5

5389cd191d860022774ddad42e727ac9
SHA1

eadd417c61f379a6dd02fe9496dc6bfc03222225
SHA256

fa9ef97a2edd53c9e1aad3e295a1d54ba2c3abdd0c070fc2c58caa3d99551928
SHA512

500cc41cc3376c4b5bdf1f545cc5587d806ded187a6e24ebcd1a1b055321c018a314aae77f7ed7c4dd83377d9147ccb4f82460e7a385a197d41c4dc21975599a
SSDEEP

12288:leCgUwQtVdqMsmpnvkIWQQIVwZP7u1LHOgrWiWBY0gE1Ko8iynCrffnjB8z+y3R:lbgUwQtVdqMsm9MIW9ZPsyQWBBgE1IPv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e6dae7830360bb68c07346c6d4d1a34fbad395f816f555ebac96c683adf12008

Files

13559919649.zip
.zip

Password: infected
e6dae7830360bb68c07346c6d4d1a34fbad395f816f555ebac96c683adf12008
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 621KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ