google[.]exe-6[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

google.exe-6.zip
Size

95.6MB
MD5

d42b2134df723b12cabc70b79370127c
SHA1

9d11dc5aaccc73a1933288f586a19795d857c3c0
SHA256

2baa49aa1cd8bc58ce4cc08dbfd2fcc009d8998a327e831fa55838b00b235923
SHA512

24ee0ac9a40ac4a70f6b392acc1759e8f4276a4351cc874c6fcfcc5911eb9d8342c8e0b0c87af9a53963c5fe513704f3fa6e22c1d457f5afebbff3fd7faf930f
SSDEEP

1572864:hw3/zs2Q6vMJDhC2MpItcXwCs5cCyW9U7nTGgOiQ7nV1yWfTGO5uTR8d7zPhcm/T:btJDh2pItcXwbBb9gG9t7nXjGrR8dzPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Google.exe 6/G Suite.exe

Files

google.exe-6.zip
.zip
Google.exe 6/G Suite.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Antonio\Documents\Visual Studio 2015\Projects\Google.exe 4 April Fools\gOoGlE.eXe 4\obj\Debug\G Suite.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 119.2MB - Virtual size: 119.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 231KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Google.exe 6/Readme.txt