15138433186[.]zip | Triage

Sharing

General

Target

15138433186.zip
Size

605KB
MD5

f52d10d949ecb777e6d6b95d23f55e6e
SHA1

70a8f3f991990a225de6fc161f175d1ee58fabea
SHA256

652812bb8100bddda27165d4b9f8fc5c07cf3c4ba2896ed331242f25ded4751f
SHA512

72cb9cb5689bfa5c54843ea104c0b3b83e16f17e4fdc1e5db47aa954d18b11a5017addafeaf06ff1d4f5c69c25beb06a1e4d37229a6bd5033fba004835e3e2b5
SSDEEP

12288:ssH8QKL4SanUmMTv+aPbXjaFqYBayY4Ha/SFbnvt7xYwdgVeN2HZ8nGDJWo:sevK0TjMVPb2E9yY4USlnvtl/dqMbo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/66c0b2c7bbe9a95df6af2d8a17cd68354e46ad70367bddb71bf8a16e996a9e72

Files

15138433186.zip
.zip

Password: infected
66c0b2c7bbe9a95df6af2d8a17cd68354e46ad70367bddb71bf8a16e996a9e72
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 902KB - Virtual size: 901KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ