README[.]zip | Triage

Sharing

General

Target

README.zip
Size

212KB
MD5

62bf3b230fb23e0e8cd13cfdc03c5b9b
SHA1

bd92ce1eaf7589f072015aaa72e8460f7a2c7f3b
SHA256

ef5edc1910f7444eb4cbddd74f8c842708279c6c27950d874d796b5084bc0d6f
SHA512

99c044ba9f774b204742e4cfd8a1c959eed57339d0c1ae427a03737c368499b01947e6c1bceb6a9a61d384cfc45204b12d63cf3f9e4e33449ce461b910966cbf
SSDEEP

6144:nFXUO/10sOG117fTlRMfBEGaPZkKegLQO3aj1J:SO1T1bTlRMfmPn18O3a5J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/readm‮txt.exe

Files

README.zip
.zip
readm‮txt.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

eN|7B 1
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ