4363[.]zip | Triage

Sharing

General

Target

4363.zip
Size

4KB
MD5

c62219655bc4fb0d790cf164313ec041
SHA1

1d87e99c70d93d15bac14d366e999b5fe55c805c
SHA256

12242edf565ceef037f775a78b12ad09d3237e57c77e403a8653160e27ec6d45
SHA512

7e1ef77a8bfefa8092a6e7bf1053a13a6ec212d2b5c661ac14c2f4c8c07468811c4474656e0a2ed4bc746926a3d271ae99424d59a3a9e155c88386cc6756243a
SSDEEP

96:8Bf1inGx9SfZ+VCv3wlTDMQ1kyKXyyJNOBIKkNvL5qK+7zHf6MlYOQVPGmcE/:8BfwncSf8Cv3w9DZjKXjmBIKEvLs97DM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/4363463463464363463463463.exe

Files

4363.zip
.zip
4363463463464363463463463.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ