Debug (2)[.]zip | Triage

Sharing

General

Target

Debug (2).zip
Size

16KB
MD5

64c052818d098cbf98db31cad1853cba
SHA1

0089c9c7d9ce23d62c835694790bc25bab2f6c55
SHA256

b2beedef343b7d581e5feea23b6a3eedf673ca45d3988c6c5c7325884de8fe7a
SHA512

3eb3fdc213b0a6c6eace26b9df318c36eaa59ae2ff4886bd76d11ad4d9cfca22a73382bde0280f3624afe30514d3253b1d0e8466482fdd84369a49200baff6f9
SSDEEP

384:h9I6AkiDH3Q8L3B40jMnB8cRiaWZh+InMnnp6T1RCuGk54SAp:hqHH3Q0jyBRiaKMpzupBAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Debug/bas.exe

Files

Debug (2).zip
.zip
Debug/bas.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\alima\source\repos\bas\obj\Debug\bas.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Debug/bas.exe.config
Debug/bas.pdb