17211627865[.]zip | Triage

Resubmissions

14/05/2024, 09:48

240514-lsz47sag7t 9

14/05/2024, 09:37

240514-llgz2sae2y 9

Sharing

Copy URL Twitter E-mail

General

Target

17211627865.zip
Size

326KB
MD5

78363c6105076b6e7664d9b9f6b7cc62
SHA1

0b406929624edbce78740f989961bae8abbaf69a
SHA256

b403019856a5f3a5135121369d23a94c32071c729d78973809287198471a47b1
SHA512

e8f1e4fdfc69f60bdb395aba79a3ea7d6a736c21170bed02d356bd11a172cdef4475d6f0e9b805ccdbb42d924471ca0a945529bc9a28f2e9f9b78f87cb9c59d7
SSDEEP

6144:tB4EgOgoCOz2iXJF3lQeBmXjiIPFGaOvQfjua9X7c0iLAentuEhnE1:3GIzplQeYTzGZvQV9w0ig+E1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/91532a785a8ee74207c9c99ba2ef786aae7c724366fcafc9d64331b7a9e542e4

Files

17211627865.zip
.zip

Password: infected
91532a785a8ee74207c9c99ba2ef786aae7c724366fcafc9d64331b7a9e542e4
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 709KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ