sample3[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sample3.7z
Size

141KB
MD5

13f76689cc2821bd087a31f48e0031e4
SHA1

8e5d1ffd26cabb76b42edfe9d53750747c2ccfd8
SHA256

02bf1d9db90f28853af64b9150425820d07f8ce4e51df7e600891112527157e0
SHA512

ab59478cc821a00c213407bfe5dc72bc8443fb8910658b8305d41f3e86f55868c5491ff9b11928c3020311ff4fceba745d7750eaf774dc16dea09a8579a43d01
SSDEEP

3072:GaZjLnW2W7dDaX/CqyenlQ8WFS9+RCiU5D8yhJmc6sFCjkIwFro:95rW2IDaXaqnTY9RCimhJmc9UoIwVo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sample3

Files

sample3.7z
.7z

Password: infected
sample3
.exe windows:6 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

VVV0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VVV1
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE