03062024_1442_01062024_MV GOLDEN SCHULTE[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03062024_1442_01062024_MV GOLDEN SCHULTE.zip
Size

350KB
MD5

368ebb9a0d7ad9de0f98143429f5ba83
SHA1

2c0d4ca5b38fb71fc2cfca45d52a406bf0ab85a5
SHA256

ff76ded129646fdd7e040f477bd7299aa8f80abc87f42f7428bea48b75ff82f0
SHA512

87258a2d9724ec90559a8c867147e591031071b077ba29e7c8090077e7c315195f95118169a79e97b5b85409d19cc9667eabfda15a9a09c500e09e23f016b7c3
SSDEEP

6144:xL3vNWryVwfA6bQ/8SVNu82/W+v17UuvZ/L1AununCCjxN4jdyfShRdHs0Qyp2:xL/4ryIA6bQ/5Nutjv1jZhNnuCCjz4jE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MV GOLDEN SCHULTE.exe

Files

03062024_1442_01062024_MV GOLDEN SCHULTE.zip
.zip

Password: infected
MV GOLDEN SCHULTE.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 635KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ