file2[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file2.zip
Size

309KB
MD5

a83bcadc426cf3a1dbd1dc3a3e29cee5
SHA1

911fa5aaaa07595c363ea6d57b72a85f6fe23126
SHA256

d6d0fdd7ca9b5c60ef6397c0a05f5fec4439aa8187b4a81eed65f019d8d0f18d
SHA512

7b37cc4724f06988ce486750e92f5342994aaafa4ea9b288664cbabc8d613b873ffd41b5358a683ebf75da760436d40eac97a3689fe4f30531d641dccc573599
SSDEEP

6144:TJLZHRawhO3rY1KZTPyJi78bQovRKbarXZyLpQwKlKXsVV9:TJLlQrY1KZGQ78b9YayLmwKlF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/External2.4.exe

Files

file2.zip
.zip
External2.4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ