17381186683[.]zip | Triage

Resubmissions

22/05/2024, 11:50

240522-nzm5bsef69 3

22/05/2024, 11:47

240522-nyc8qsed24 3

22/05/2024, 11:19

240522-nfbbescg59 7

Sharing

Copy URL Twitter E-mail

General

Target

17381186683.zip
Size

19.6MB
MD5

a4b0f07cece9bdc869af12e07e18dee6
SHA1

403909f823b4a51b3c86d1c69ccac97b3f7d8938
SHA256

1f6b92413285af231ddc5f3f22873cc98b833437221aaa76553e787f6fecaa92
SHA512

11b7ce42fd45454002c7d33be90ac636ca9f725552f6c00ebdf1bfefe37439922ac6cd95e0b1b6017f0a17830ecdbc8d7a8a2fbe050ac5b59ae5727c99b404a3
SSDEEP

393216:0T1JKr5HM/70Hdaad9UMk8u++/xkE3QtttlSRgWrgpNMWntF4qY08W:05Jktg70HISputkKQxlK7rght+rTW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/878fd2840d536fea8322383338807af2d3004bf23786d33c8dc8bc3c7b6b95ef

Files

17381186683.zip
.zip

Password: infected
878fd2840d536fea8322383338807af2d3004bf23786d33c8dc8bc3c7b6b95ef
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35.7MB - Virtual size: 35.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ