03062024_1441_03062024_SKM 26399[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03062024_1441_03062024_SKM 26399.gz
Size

896KB
MD5

f5cfbb024a1d21231e93b71f3d231c34
SHA1

de277947d95b8f5e0e437dd38657ad991768ba7e
SHA256

dfe4e970ec744a40ed8edbcbe535a17ddd58e9b9677f101bf266447ffa742867
SHA512

d914cbbdd7e58ff64c5833576c8636f50c43fbacd8a56dc4312a14c3bb3bdec8d7570de06888041495174b9e910ae5cd364725345e6f8171df7bae9c4d56a087
SSDEEP

24576:v0oDn4RT7nJLC5Ze77UJPDbVbS3PNLTo9qcnT:MrTNO5Z3VkAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SKM 26399.exe

Files

03062024_1441_03062024_SKM 26399.gz
.rar

Password: infected
SKM 26399.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ