16178785216[.]zip | Triage

Sharing

General

Target

16178785216.zip
Size

109KB
MD5

b0a360ac21a811f41a01ca2144a244d3
SHA1

6a02fcda6199112d340a1d2903353a6ebcf48563
SHA256

ea2a2a83ac8f93dc256f1d3f4aea5fa7ca0113f533c7191faf95a427335a7786
SHA512

cdee285478f9ca2a69d1906d3070f385cf609c476fe656104f2ed44ba9d3819696313bc889b1d0e83e8b9e10cb83b8198e14eddd75d328574bd0ab7dca0d87b2
SSDEEP

3072:e1+EuGydySl+zeUxYxRnX4xH1Kyd0Wza3POUMRNq50aojYiC:eo+ydySNhnoxH190WzQjMRNq50aojs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cbc76954bb4b1f66e72b0f294b0f7fdedfb4f48f026cde3134d5586f7c5b0c49

Files

16178785216.zip
.zip

Password: infected
cbc76954bb4b1f66e72b0f294b0f7fdedfb4f48f026cde3134d5586f7c5b0c49
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\HP\source\repos\shingeki no kyojin\shingeki no kyojin\obj\Debug\shingeki no kyojin.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ