Stub2[.]zip | Triage

Sharing

General

Target

Stub2.zip
Size

6.0MB
MD5

ee669ff9dee75e921b357c389fadd0da
SHA1

6bf8f6c96f0066b6a6328b4124ba329a846b345b
SHA256

15217201b56064858faa8d9b853c5a45eb0e8e18a82374c537a8b55b2954b889
SHA512

8d5ffb194550fd724f5c2ab65d30883682b1192889664d166a8e6f7fc10d75e117d15a791f365cf096ca009be0c3646b241fb9b6fa72e26021008287104c6c52
SSDEEP

196608:9CtSE1/7uvlJ/QK7NFPB/BWGvCY42zd5B0ho6Ey83u:9f0/avlFJXBpp6r2zdb0utNu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Stub2.exe

Files

Stub2.zip
.zip

Password: infected
Stub2.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12.0MB - Virtual size: 12.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ