Test[.]zip | Triage

Sharing

General

Target

Test.zip
Size

11KB
MD5

2256687ddf6c523cf32a4cd392601cda
SHA1

4143ca411e3e6e1d72711a0b0edda526ee107537
SHA256

9792d71be4db36f2b38b3fc773c92d31c27f979e803cff882304c68bfe1b77f5
SHA512

c83f2f399eef05cc7bb0eea42e179470b99158ee33b63c38b040ac2823c2c0e2a6a34546e172aeec52f73f9eee3cf2b243bf0549530808a4298c2df7ec4ace31
SSDEEP

192:X+kbokmcLz/o0wGhV5pw2l1r6N/Rwq92FeAhPzesm56mJmBCx93+aLge5cGqbxTY:Ok6cLb+GhtWN5wq92Pzxmkna9OaLgemS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Debug/Test.exe

Files

Test.zip
.zip
Debug/Test.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Rtehnik\source\repos\Test\Test\obj\Debug\Test.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Debug/Test.exe.config
Debug/Test.pdb