59031a54582568cf7047ed4010947a8f[.]zip | Triage

Sharing

General

Target

59031a54582568cf7047ed4010947a8f.zip
Size

632KB
MD5

2db81a4348b7476101f1d8e4b726f6a7
SHA1

5f217a1b5a41689152a8f12362a6f9a63425af3c
SHA256

1fb885685884a927430d6b8ca67660c61739a0d7ad55157bc30f1071f9336bae
SHA512

67355d6784da04ca71d87147910db6705464b3fd3cd166ef905ff78aea7ea73cbcab545ba5fed74e9eb7fd350c174f1e751f4ce2c3fd583e0513f5935b80b28d
SSDEEP

12288:TnA/HqAurT2u+XxJr62WFZDZ81Ffw+obcPDPKOSZZf5z7LUlf:Tn+KAjXHr62elZ2i+EcPDPKOCZfwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c5737e7951ee35d1c250124a7e9a39ecdb2af67999fad09b91cfb17e0e744bbd

Files

59031a54582568cf7047ed4010947a8f.zip
.zip

Password: infected
c5737e7951ee35d1c250124a7e9a39ecdb2af67999fad09b91cfb17e0e744bbd
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 970KB - Virtual size: 969KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ