iFOBS_Update[.]zip | Triage

Sharing

General

Target

iFOBS_Update.zip
Size

404KB
MD5

ade1cb352446da0336c5f38a2947c812
SHA1

eb516d82feb4da2a1316d66ad089ee9edc5cfeef
SHA256

8a2568c0b409b42a78a8389d9812e8bd117237ab31b5349ebba76c44b94f685e
SHA512

e2de416e7240c9c7544da8da5566e8af98016b581511e7e3e320316e758957a96300da1239350a5358394874e4985fd13157574de1b412b53610702726a22a50
SSDEEP

6144:+F8ZH+MWH0pS84IjT/aVpLSzbSbr9a2PgFXhDMQ6M6RqI6PfeinbCIx36sx36p3x:+1H0pSU3aVllaegxhDMk4qI9ibCPLIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/iFOBS.exe

Files

iFOBS_Update.zip
.zip
iFOBS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 343KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
iFOBS.exe.config
.xml
iFOBS.pdb