17560242131[.]zip | Triage

Sharing

General

Target

17560242131.zip
Size

320KB
MD5

1a9e5d18ad3df046eaa8d431a48a2b2a
SHA1

6f99aa0906fe34a3f2033423ca8e053002d2843a
SHA256

d4d5f54dd003162bf3d04f0343ea136226552b2e004c2ba565d38803cb9f5282
SHA512

e0fcf57b62202c7f3c4dbacdb31ff04ea547d562b68f2bec8a4a0d4ef10c71216a1794d7d6f7624cdeeb7b86c48e7e074522c9078b1c70fe8f5857f7e9e3ef0c
SSDEEP

6144:mKme+a2LchRZMjReP2ICVbzD7mFtQCEKh3/6S3lKZIsOCp+99q3HW6SzJQdrRHAd:mKl+XLYueP3kbCtxva+am6kJ02M6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/176aa2e0fe77812b96ff393d634175093672ca764f41c146f04ca3deb8be4fbe

Files

17560242131.zip
.zip

Password: infected
176aa2e0fe77812b96ff393d634175093672ca764f41c146f04ca3deb8be4fbe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ