d2c0619f3cedb2dc0355af567407248c[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2c0619f3cedb2dc0355af567407248c.zip
Size

1.5MB
MD5

32b0130c7b3171013d80c8f25e85dd15
SHA1

ea9a8df071335a5a24ae8fc93ce6b96d5e337b8e
SHA256

f4be2a5d728d795bf705a397548fbbf7c007935f386347254fa4130c0a591281
SHA512

63d15954fc12b4f05afee9d0c619f932bc41d5d4678a3242d8d2bd8a8aada086d8cf83509954c047073bfb9dfd5e480d0700f06ed4e89eba2396be120a03f794
SSDEEP

12288:nZZ3HShvYoQE8sKUvm1WoxG4wPndBcbTLelr6bSuOw:nZZyv3QYhC8PndBc/LeV65l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d2c0619f3cedb2dc0355af567407248c

Files

d2c0619f3cedb2dc0355af567407248c.zip
.zip
d2c0619f3cedb2dc0355af567407248c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ