adb3e66f46b3a9d21a568dd3dac99df9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adb3e66f46b3a9d21a568dd3dac99df9
Size

306KB
MD5

adb3e66f46b3a9d21a568dd3dac99df9
SHA1

a26a1c02f276d3225f9433909026e0daa05304ee
SHA256

de168f59005629f8f55fd6323c25939b66418c558d17a6fdcce8cbd97bd8babf
SHA512

aff8288b29d61d786636d12a944029441c269ed588d6d52ac7261ba35fe12f6f12bac7e267fea3c55aa2462ea8a7d6ce20953dd988197b7c6595881c40276a6e
SSDEEP

6144:EcUidjC88WAnrddkbvfN3wbj5US/OoEc89JcSy8LayU8FnIgi:EcUilYrdiF3eCIEc+vFLvuV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Phoenix.exe

Files

adb3e66f46b3a9d21a568dd3dac99df9
.zip

Password: infected
f4ebed9ccd94d582030726f3e2d376e3c41ec585e4ba1cbd262b05a650c35c96
.rar
Phoenix.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 361KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ReadMe.txt