Domain Sort by Saind[.]zip | Triage

Resubmissions

06/08/2024, 16:34

240806-t3fgjstgjn 10

06/08/2024, 15:59

240806-te53astblp 10

Sharing

Copy URL Twitter E-mail

General

Target

Domain Sort by Saind.zip
Size

313KB
MD5

65e166a05c7ff5b0399c69a494ec37c4
SHA1

f218ad16679f0f472c9b483151b571e96e625472
SHA256

c0e9175f35dc42ce0d7c4e10dd2f651d9ddb9f7da8590cfd6a8cae134d9c4277
SHA512

88444a34ac5a255df289c83fe1f18bbef67a94ec04c8e6fc988b39a47c4b31118e90f43451eedd0cea08ecff5158b40966d191a1299c72d4b20812633555c7c6
SSDEEP

6144:qgPgzWOH2Yn9vlBuGLOyT8b0IXBuxofRQq8QoeqZsRsMGCpwp6U80zyC:q8iWOH2Yybzfl8/ZWAp2u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Domain Sort by Saind/Domain Sort by Saind.exe

Files

Domain Sort by Saind.zip
.zip

Password: 1
Domain Sort by Saind/Domain Sort by Saind.exe
.exe windows:4 windows x86 arch:x86

Password: 1

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\PC\Desktop\1111\Domain Sort by Saind_new\obj\Release\Domain Sort by Saind.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 699KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Password.txt