13921565941[.]zip | Triage

Resubmissions

05-01-2024 08:58

240105-kxmh8shfb6 3

05-01-2024 08:57

240105-kwtadshfa5 3

Sharing

General

Target

13921565941.zip
Size

127KB
MD5

909af736517cdd3018b872d66fa1722c
SHA1

c9a7696948167385aba4ef97067724be231df472
SHA256

fa02cb3ee857e2729c20155fe066909796de46caf5b94c49a9155f038499b653
SHA512

3b32da7573e0838344b505279b2c5a49928f1a5a48d6f8d232234ef1b099fa3a29c0fe6d2779dee8d3f7d449cc72c58fe20f2dd49a8bc2313dcdfb1d3bd5ca94
SSDEEP

3072:jFO1zGjRYKIM46TActuW6DF4EZAtp78JZca0P7DpgK6KhrIOppP:ZKuyq4Whltp7833iDpgK60r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb

Files

13921565941.zip
.zip

Password: infected
453257c3494addafb39cb6815862403e827947a1e7737eb8168cd10522465deb
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ