project_relic_16085726363[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

project_relic_16085726363.zip
Size

2.8MB
MD5

af924d14ecc85b42f8c456836c1604b2
SHA1

aa00fa4d1634a7b9b0a75829cd6663371a3d177f
SHA256

b024bfaac73ae619eed6ec748cf73895758214a8c97826719caf00dd257554cb
SHA512

bdded1fc8671e23e23a705209932822a9c5fbccf6aceea6d3e37a939c93c56e44146ac567ca9a7617e34882da9db86c0e5f768cc3ece4fe1e74db16deccd121b
SSDEEP

49152:lzEYG6gxa9MyY0VNB1oFSbz6xjASHEEdy3iYcBw6rG9hJhGXNxIvv:lzEYZ/M70Vr1oFS/6xjyE03LMGHJhG9e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e0a9584c753585891f12548725849c2638f96721cb2c361bc67b680e996d406c

Files

project_relic_16085726363.zip
.zip

Password: infected
e0a9584c753585891f12548725849c2638f96721cb2c361bc67b680e996d406c
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE