16551628702[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16551628702.zip
Size

51KB
MD5

df387d5c912ef36628af17c190fdbf52
SHA1

9de209715f7313cd7a64affae1c936625e372a85
SHA256

ff6c9d5427afdcc15f115e1e065981e658865e14492b168aaf4f4667ebd25915
SHA512

ffb6ec395b2d55948d11934e52b137559dac3a5496d36fededdb5a0b3b303c29231b1a0f674834178fbdefc0f8eb1dd9ed18f8744ff3b4388d13d254a9ac0e41
SSDEEP

1536:/FEv+jsFM5mgYJJSaZwFu5XJTA9/xEl3BudlRL:bVmgwSaZI0xA9/xoBKlRL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2c86bf7d05f63c4d0443b5db0cdf16d41016e029fa1f9c14b5d1bc8587fd8181

Files

16551628702.zip
.zip

Password: infected
2c86bf7d05f63c4d0443b5db0cdf16d41016e029fa1f9c14b5d1bc8587fd8181
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ