8dc1bccc469fd7eefa9cb88d543e70f7[.]zip | Triage

Sharing

General

Target

8dc1bccc469fd7eefa9cb88d543e70f7.zip
Size

3KB
MD5

4c873229dfbd1010a2dcb91af0a96c01
SHA1

d63ad80a406bc75adbf6b32133ef34f177442e1c
SHA256

93d25db5d93cfc836c7727e011d610fa4904666bb52e6d5b89987cbb64289f5e
SHA512

4460ab07c0bd90a36d08316b1b2b9383a837c9b0bb340780b774fa66dbca13b12dd23b3a39f26423ea0e28754383606c671a322b7f04281fba5dd13c4b35534a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/171ff92337f1e80f184c5058180ebd09e525dd6f99fb5134d3b00cc99925f19e

Files

8dc1bccc469fd7eefa9cb88d543e70f7.zip
.zip

Password: infected
171ff92337f1e80f184c5058180ebd09e525dd6f99fb5134d3b00cc99925f19e
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ