fb90829fafd93c8e83d7c3dc8f6af02d[.]zip | Triage

Sharing

General

Target

fb90829fafd93c8e83d7c3dc8f6af02d.zip
Size

428KB
MD5

30bfa91e6f7703cfda2de08dbee2ca23
SHA1

dcd13fc5b16ad512340f35192e9c3edb41b009b1
SHA256

42f46f9dccecd88e438399b21d2e65df9168e5e09106ba44c1f745053ec1005e
SHA512

ca1ed9194c156dc4cd85831add47a74958df396344543844ccea94f0b591958c0548cfe3618b0adb63e1a58a9773645a3b4a3bdebb6085bb2a39b58dc0afec71
SSDEEP

6144:I4NzMbo5Ccne5q1oCNQBjZpOMC5FyLoFr2bHcjXG88Fl5o904nhUZCp61D+jtNxk:m85Ct5qTutS7rpyJvo90OhWCp8DA/xqP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8195d90a65592855ca10dc169e75e02dd055f91462c9993d18c879ee8431cfbf

Files

fb90829fafd93c8e83d7c3dc8f6af02d.zip
.zip

Password: infected
8195d90a65592855ca10dc169e75e02dd055f91462c9993d18c879ee8431cfbf
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ