06082024_1302_05082024_Packing List[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06082024_1302_05082024_Packing List.zip
Size

298KB
MD5

7015ddc4f17bb5a8527997a97b508dfb
SHA1

2f3312ced8a62fcdffb5e9d0fd92acfa726897c0
SHA256

e8b1617ba36355ce98eb91422ed512bcf94b3abef5ec78b025343fc481b5c886
SHA512

3a5d9f518cc1dd680bf8b45f87b223858fe909ca78043516164b289ff4f401b5bb161d68647a9e498f8796ac2d6a16e19575ee3a12af32adf83b8bd093631bdb
SSDEEP

6144:gpFDrnSBc8D6h7wVVVxswGtGS3RD0pThZwNwb8e3xBkx4XJ8fv68l0AdlskmKnme:gp9ShG2Zsw/S3RD06NwV0hvBdlyKnmFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Packing List.exe

Files

06082024_1302_05082024_Packing List.zip
.zip

Password: infected
Packing List.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ