file_46ad66540e4848728c251a0a41cde0e5_2024-07-10_12_58_58_956000[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file_46ad66540e4848728c251a0a41cde0e5_2024-07-10_12_58_58_956000.zip
Size

2.5MB
MD5

0846099354d23f8e903abee6933388f1
SHA1

19a05a2f482226a69622676c177d11891b37db1d
SHA256

8c875e374eed0f6ca0adbade2abe8326373fd4cd7a5daedd51a1e2eadc2e1e2f
SHA512

2c5d071cbf9cda2e5879b8c3e0113d773c55f22f9bb576ac227a49606c35c8020266ddf0cc56f6646195451899fb0163a6c0511d1723dab856e6651d4084c6a1
SSDEEP

49152:02WyG593+ujaKYbaJ5EkGWJDCITUSVyKE8Y87YpBifXW+Zd0WXDkhnydmav:uyG59XaKYbaJ5E5WJDCITUSVnLmafXWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/entry_1_0/nsv9323.tmp

Files

file_46ad66540e4848728c251a0a41cde0e5_2024-07-10_12_58_58_956000.zip
.zip
entry_1_0/nsv9323.tmp
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Bedecanes
Recicifupu

Sections

CODE
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
manifest.json