ed3cdb090dd5f8394b1fa75b32cc47f8bin[.]zip | Triage

Sharing

General

Target

ed3cdb090dd5f8394b1fa75b32cc47f8bin.zip
Size

379KB
MD5

24410816fa0c19720c3886ba6471721e
SHA1

26d2454d434100ba912550a14fd22663c0403d8c
SHA256

1b6a616fb4268be42e450d33cd8114f455a8240a8c8f61806ea935e42c4115d4
SHA512

f300aa4eeac7b84cebbcd2d748ff3ca6020ddc405c68bb9349339a2cf99cc04ee7a370cbb28210f1a82423ef4a211fa777196eefeddc665341c2c96303d2674f
SSDEEP

6144:nPwuYolkdJKCJnkQPOTv9foSXKsHyimJo1WI/bGT7d8N6A1rDIM5xF4iq8YyIW:Pw7YSnkly8DHOo19kd8N6qrj48YLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/38964e523cea48bc329bfd1a74a818b43162f6962ca21c6ef012b716c6df467f.exe

Files

ed3cdb090dd5f8394b1fa75b32cc47f8bin.zip
.zip

Password: infected
38964e523cea48bc329bfd1a74a818b43162f6962ca21c6ef012b716c6df467f.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 523KB - Virtual size: 522KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ