0d1fa230547e8327115e01b3f5956133[.]zip | Triage

Sharing

General

Target

0d1fa230547e8327115e01b3f5956133.zip
Size

416KB
MD5

9c5caecc1e1d0d6bbce32a22718afa92
SHA1

30cbd391f1785b882959463f333afb797a8c93c4
SHA256

f171614979a8a8e605abcc22ba61300a7597670861ba014570e3c8c9dee7590a
SHA512

d3956b50aca9d4212383af6387a7339b39e1180efb1897d3992c720f59d141c7cb53f294470335271eaa0ce13bec752160059565ec44ca337da31e59df7e3027
SSDEEP

6144:Ne+crvUq7YAJQsoS9s7JbxZy55zvhhBh/IN2KpIZJsyh5KBM6cfAbvUNRpPq:YlrP7CsoR2zrK2XZJPqxONNRo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8e3e00075143d3fd621479fb61188c41560186ce1877e83e9d1e938b866adef6

Files

0d1fa230547e8327115e01b3f5956133.zip
.zip

Password: infected
8e3e00075143d3fd621479fb61188c41560186ce1877e83e9d1e938b866adef6
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 397KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ