1936394568442f8b917b2316d9379a4ef8524802ece47376757fddea7907bcc3[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1936394568442f8b917b2316d9379a4ef8524802ece47376757fddea7907bcc3.zip
Size

709KB
MD5

a8fa0a09bcd47ade3caeefd4d93b6b0f
SHA1

8dbefc90d00655a3b5e076d77ff546c7e03d8bc2
SHA256

1936394568442f8b917b2316d9379a4ef8524802ece47376757fddea7907bcc3
SHA512

cffdf70b057045283d1bc908ae1f25e73afe8a857b5837ef8e1abfff028346e78a95459f6b5be870c147db3cca1914c6f96645395ba88552de244a327a615828
SSDEEP

12288:Ivai2igCpcrkrYLV5DeKKPw+SfXhv0cPEu1pxSr+BlcMENQxlVfFUGAh2ZZ:YV1+rkrY7eKKPw+oh1MeSSBmQxlVfFG0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TNT Original Invoice.exe

Files

1936394568442f8b917b2316d9379a4ef8524802ece47376757fddea7907bcc3.zip
.zip
TNT Original Invoice.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

KYWzQpy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 747KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ