Archive[.]zip | Triage

Sharing

General

Target

Archive.zip
Size

11KB
MD5

f800f351d4786eb3a35b88774ec89421
SHA1

dc948b5044ef71e84fd264de8053448a9df49d12
SHA256

082eaa940c428ced0fbe113a8ebe5806c989fa985b666a738401ca7f95bd37f2
SHA512

9e7b8ff62ec739a987357b0c3802879b4988f27a6cea41a2d65a6843cc5b0f617a621f86105fe1f01d03b8192a23c8fecf75364b1eafec1e8e20450034402b94
SSDEEP

192:ComeXZTHygLaRDW4X9nD92yq90UJky4/zSJvk5McfpofWDZQcwfF3nyRe7KUXsMK:f9ZDjVWbqdyJx2WDZQFF3nvV81

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FBLA Coding.exe

Files

Archive.zip
.zip
FBLA Coding.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
__MACOSX/._FBLA Coding.exe
__MACOSX/._partners.txt
partners.txt