16819576831[.]zip | Triage

Resubmissions

24-04-2024 03:52

240424-efbgraef5w 10

24-04-2024 03:51

240424-eegblsef43 7

Sharing

General

Target

16819576831.zip
Size

258KB
MD5

e1cb33520f6a08fc9bce7e18478efde8
SHA1

c78ae7436a57fffcf4027fe813b985af674a589d
SHA256

d7359087273f249cce6c01e7a0fb0a80f296b33b112841061534670211d69c37
SHA512

e32768ca8a99b6d71933bec499c070000147bcd569ab8d0b04c54f657c16dedfe7d08d8984382ae0d5d8becc4a77ef9e9a9f40f1481b244a31e3b965899cf705
SSDEEP

6144:YokWFVc4JZjNwT3aKo+95cbjedZWIIASpIDgJ7p///2KRlr5/ugC4F17lnJRzttX:YoLfXKjR9+bqdZ92FeKRlr5/ugCGdltB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/68430c6b95cc97d1966b7d01bfb775d9e4441517218022b10beaccb503fbb2ce

Files

16819576831.zip
.zip

Password: infected
68430c6b95cc97d1966b7d01bfb775d9e4441517218022b10beaccb503fbb2ce
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ