49783acdb261c20342650c50de66e30d[.]zip | Triage

Sharing

General

Target

49783acdb261c20342650c50de66e30d.zip
Size

139KB
MD5

242d8e0890d359e039848ae73aa753f2
SHA1

fca35c31102b652633e515cdc6d90c5ac0ac3482
SHA256

9f724731fd6bb797a62bec03eb332badacfa9ea2313d4a62446cc1679d2e4505
SHA512

237f49321864172ec0dbdd51eb99ccc4bfca93d2cff7d7f5db0a0e7d748b6f10813b9b2cb6132d01e85548cebdb66e92c4fba1ff567352abf363579a26be72b1
SSDEEP

3072:yZdWGRvKExkaqXJDeQabR1do7f/6pp/LcLrz6mGoKGi1PdU:0dDSExXqtrmjo7K7yudU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/12bb25ef1a2b4e1b253809de0b4f34262e3520b381048fc8e15c46e864aec8b3

Files

49783acdb261c20342650c50de66e30d.zip
.zip

Password: infected
12bb25ef1a2b4e1b253809de0b4f34262e3520b381048fc8e15c46e864aec8b3
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ