18468504788[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18468504788.zip
Size

4.0MB
MD5

a93b58865be00dc92a2da0000f087cf8
SHA1

561234b59e56e07766faefa99bdeeda46dfc4a67
SHA256

a4dac9e5020c5d958e302a29873dde6ed5bea90e5e08eb78a193e890a37eb22d
SHA512

841c92f53775c80e1655f10f84d9837383bc38994c4b77e402fa7f73c0d46184eb485d75c719d5bb020f6819da6e554eb5ead94c5ce5c870e7044a6c422b30c1
SSDEEP

98304:CWzlKQU18qjfTeUC9PvqGCc+O2wPHocoYKbZnPmG4:CWz8pGkSVkNLO2wPHfovZPmG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4e2523b1f5c580095120fd445bd14c458a350c520e4d063e06d0ba16e9e097b5

Files

18468504788.zip
.zip

Password: infected
4e2523b1f5c580095120fd445bd14c458a350c520e4d063e06d0ba16e9e097b5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Desktop\Debug\bin\Debug\SLN\permit\obj\Debug\opinionsR.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ