Pocetnik[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Pocetnik.7z
Size

1KB
MD5

2dbed619d9ab5f100069a7f8c1ed3062
SHA1

6081958945bf6294ff5f7c57783c374ca8b344a0
SHA256

40c658cfc37c00c073b16e77b050f26220e114d3b3ca4cd60b7fc9918d2935c7
SHA512

98be40384776837d9a49aadac6191f594fb5e6705a602e245b7e7408f78655a37777d0b0c13daf70c7a7b2932006e93908e19d3b28c1ff1f100f348b6df80ae1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Početnik.exe

Files

Pocetnik.7z
.7z

Password: infected
Početnik.exe
.exe windows:4 windows x64 arch:x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdfg
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE