06062024_1714_05062024_CTM USD28600[.]zip | Triage

Sharing

General

Target

06062024_1714_05062024_CTM USD28600.zip
Size

233KB
MD5

0f2b0448faffbe4b7601dbac54a7b0d5
SHA1

891fed27b037971cc729ab247835c1d4450cfba9
SHA256

33f0f6c4df102e31aef810d15f040b2c95913ec270d62b4a63524af4b0127509
SHA512

c1d777756a8d3da755f6808854a76ed8e191e1f6aeb23872538531d99927294ebe04b6208d320c1caed63abb18a414c8657ff22097840f3932ae3486e3081330
SSDEEP

6144:nrxpFQNFTKgeQrNUJCoN2JpOlQb0rog3gHNUnJ/M1bTrP:n3iGgjUJCW2JwlQITMbxrP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CTM USD28600.exe

Files

06062024_1714_05062024_CTM USD28600.zip
.zip

Password: infected
CTM USD28600.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ