40a931986e5bf561e932144f66730a3d[.]zip | Triage

Sharing

General

Target

40a931986e5bf561e932144f66730a3d.zip
Size

382KB
MD5

e5452bce08df004accfe7c57e9179096
SHA1

9635034e069c9dc4e9bb19a9f78f502bff226fcd
SHA256

526cf17fdd98b9eeba1b3b991c1cda2f9e78b074b6f5b9fbc35624b9aea266fc
SHA512

3dbe256d69848a0b7820d08d177be5e7d0f16838baab03275c5d256b9f45f88f138e63c5850d7cac950a6b3e5c04db9d9fa31abbfba534539d7d1745fb91e3ab
SSDEEP

6144:QA9VkrvPVLrk1mKq8nxMep1Q7BEVEIKg5PEmbVM96czUxjOkSTJ3enay/khSJpUf:U6mKNnlpqBwEMFGoczwjJaJ3eBkepQH9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e8309fe398b789d3706ae732c85cdf0aeb1fc7731a478cb60eb4a75b9641d9f4

Files

40a931986e5bf561e932144f66730a3d.zip
.zip

Password: infected
e8309fe398b789d3706ae732c85cdf0aeb1fc7731a478cb60eb4a75b9641d9f4
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ