13747871894[.]zip | Triage

Sharing

General

Target

13747871894.zip
Size

614KB
MD5

56d8535bdf70361e80606a5691b007ed
SHA1

53cd333cabee02d14216267d5050ea71e1afdadf
SHA256

e83b6c3e05ecd0692cb70444228492dbd746a22374538a538b7a1487b21d6a05
SHA512

de2117e09d5fadd28ef2f96ec2fdfacf2fa67098470190fcf68b31dd0533656d232e03a0453a08aa534aef8c8d25053fa5ff002c0eba03d0ed360ee179bb508b
SSDEEP

12288:cltBjloHjQPqd1WXePRK8XwggNRe07fdTnbrWkh7:cltBloHjIpe5KKwggNRTZbikB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/76ca4a8afe19ab46e2f7f364fb76a166ce62efc7cf191f0f1be5ffff7f443f1b

Files

13747871894.zip
.zip

Password: infected
76ca4a8afe19ab46e2f7f364fb76a166ce62efc7cf191f0f1be5ffff7f443f1b
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 632KB - Virtual size: 631KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ