SickLoggerTrial[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SickLoggerTrial.zip
Size

207KB
MD5

2044b254d915a5b910b9b357805af8e2
SHA1

00a94622f29e256615feb2c862f8ab2cdf20d764
SHA256

40576edc509edaa75da4543a42bd922f4d00ad21782a56ae39f636497df4bf85
SHA512

54872204a39709f5033ff8c98e9aa43b0fce7522e15b70407f3329f587c1c98a3cd60d5970367ee1b18a4a133cff62cc523d3ba5054422522cd6fb61cd1b4cf1
SSDEEP

6144:Vi9Y5BfTHrH/FDcHKIRLqaiDcoE9ErgTbAH:p5tTLf9cHKIRLqaiDcoEge0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Sick Logger Trial Version.exe

Files

SickLoggerTrial.zip
.zip
Instructions.txt
Sick Logger Trial Version.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ