8b22c309d2a42924e30bf7b7f81369c3[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b22c309d2a42924e30bf7b7f81369c3.zip
Size

4KB
MD5

d65e5942cf1e1fa819a5bc1f0220f576
SHA1

8dff19ed5ff801512e9cef8bd25aa82fd621e3d8
SHA256

4a0f0d09946481b1f468ac3b99c45bfd790aece0a46533dca836f7c4a1d2517b
SHA512

38a9341a160ca87a29646cafd661cf28c9da37c692c2126d63bf5440edf399ec275d6fd89e86618d0139fd7ae557574808b2c393a52c1d06ab2d1663769c20a9
SSDEEP

96:ZNCzE/IxvYWw7ezeMvkxa1hXLDlwev0GYpBQxuQEg8UN0J0btE/l/wTtcFbm:Z//IGWYKejxarGa4BD3J0b2tITWhm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/78e453488342aa1f72162327cee20352fdf48dfcc58726bbaefb8c51c9c3cdfa

Files

8b22c309d2a42924e30bf7b7f81369c3.zip
.zip

Password: infected
78e453488342aa1f72162327cee20352fdf48dfcc58726bbaefb8c51c9c3cdfa
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ