16497717518[.]zip | Triage

Sharing

General

Target

16497717518.zip
Size

24KB
MD5

4751db24be8c11e0ac14311125286cde
SHA1

7b06d74bf8f1dd2f81f7a4cb0a7fec5d0db74425
SHA256

e54c1433883e544025ce6a0ab86c8954b02496144ec92e6ea0f17c17a9ee19c5
SHA512

59a3d677c6e79789c71ad291e8e8e8e4d1315595eaf70e2c85cc2eae02b28886caa73cd372d28bb3570daf6dea5028d2131a2b0b825e6910a20a1a79b3ea941d
SSDEEP

768:up+zjSqoRLx3dV+IPmcsXR23ZpIXFGySf1J2:g+zjSqqLfVqZR2JuSc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ab9cd59d789e6c7841b9d28689743e700d492b5fae1606f184889cc7e6acadcc

Files

16497717518.zip
.zip

Password: infected
ab9cd59d789e6c7841b9d28689743e700d492b5fae1606f184889cc7e6acadcc
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ