d358c34a708312136db08d38a934c42eecfcbc7f376541dea03925319f9a05ed[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d358c34a708312136db08d38a934c42eecfcbc7f376541dea03925319f9a05ed.zip
Size

665KB
MD5

6ca3e2a0d20c2394277f3d13904b183b
SHA1

e10a143da76a117d0093dc4a96f57096c08bced1
SHA256

d358c34a708312136db08d38a934c42eecfcbc7f376541dea03925319f9a05ed
SHA512

60c7ac15e23c68dd87d6c8767593b62008442be10e524932f4146a768da4e6a59574585acedb6b1f096c1ec3a73a83c396804f897ac8ec1ac0ef3997dd368578
SSDEEP

12288:/xAn2yPXMs3xLChH919Cdj4A05ZNFIrdYrpKda0rlBcKQSOejuy:/xAn2yPxpChH/Ne5YQrlBcaB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TOP20240252.exe

Files

d358c34a708312136db08d38a934c42eecfcbc7f376541dea03925319f9a05ed.zip
.zip
TOP20240252.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ