Hash Calculator[.]zip | Triage

Sharing

General

Target

Hash Calculator.zip
Size

60KB
MD5

54c133815dfc92d9b12b8640259c08d6
SHA1

52ae088553d6fecda2d791f70dd7bf39d6fa7ba6
SHA256

846ab02a830b8d3190bca7589fa965705922e75fe2b2bf2416158881b69e7933
SHA512

9f6739d93ff81c1cacc4876283407af895d02883f03bfca291e7a581e01428bf739a7c582149e677eea5c09cff4baa075b40360c5288e1192b5ff685081f1162
SSDEEP

768:lLYMXZjAq5CYIB6nWT+F9UUBj1yWTDbt9yyAA0+zWcOPZP8KVI9dBbdwodIHGzB:lUMXZkq5A6WTkBhTz8A0+DOCdhU2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Hash Calculator.exe

Files

Hash Calculator.zip
.zip
Hash Calculator.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ