6e545f6e39c133d39164a73673e2d29b03897a3ba35fd5fac135077f64d81398[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e545f6e39c133d39164a73673e2d29b03897a3ba35fd5fac135077f64d81398.zip
Size

645KB
MD5

359bb9ec46a991616d8baf76c843e1f1
SHA1

60485b798ab85adfd006c9f9c118038f1c2f67b9
SHA256

6e545f6e39c133d39164a73673e2d29b03897a3ba35fd5fac135077f64d81398
SHA512

68a91576aa496a02e094f76c0ad4c8fbad2f0cde831d0e86c160ffd2627d97677d9ca7e157e029a2cb9fdd7b4d938b4b8192d799efa302373b2080d0af3d88d6
SSDEEP

12288:gwZsf8VhxQUapEndCIrlZlcWJ6cYwGlftU7+c91wQcLbuFz4Tw0FFtO1mj:pgIrlZlCTlftUzQ+Fww0npj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO#0094321.exe

Files

6e545f6e39c133d39164a73673e2d29b03897a3ba35fd5fac135077f64d81398.zip
.zip
PO#0094321.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

TloC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 687KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ