58af7b91af918aaaf0517c50728ea7ed[.]zip | Triage

Sharing

General

Target

58af7b91af918aaaf0517c50728ea7ed.zip
Size

469KB
MD5

0fcec9555d3a4f7484928376a4a1da22
SHA1

37e1815cb25911fb553c83cd4cf7d0d4c3752c56
SHA256

5f2aa51560eacd441bfb35e52afce2c6e1d3ebe0e8e1f3f209156f7002c0a479
SHA512

774e08b541264b992717cac261df742483779dd63ecc3ca94fd1ee959bc98ad38d5d07f971fed8d1e37bb5f180b197f524dd555f6b8bc29a1c98e4818c2ee147
SSDEEP

12288:0nJWLVGbTOPm6ZTXhQ3tqT7BIcUeXQSOX1Dqfy8Rx77:6WITOPmaTXXZpXMX1ED377

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/24d6bdcc1fd603ed16d96146e9dd9c3c876c19f70a0b262de431e5c333b43d49

Files

58af7b91af918aaaf0517c50728ea7ed.zip
.zip

Password: infected
24d6bdcc1fd603ed16d96146e9dd9c3c876c19f70a0b262de431e5c333b43d49
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ