701fc5106b0d5d1a5703e51a27ea19c3[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

701fc5106b0d5d1a5703e51a27ea19c3.zip
Size

27KB
MD5

b069757468d8a648a1bfea78086f2845
SHA1

6a350662cb48437980a76f8e603d23ff871671b4
SHA256

48e7fc5e5ad8630283904c8f5d21e9b42e71ce4716000ea0f30360308e28a927
SHA512

97377b933de5c8ce6f6f72b219fe926314fab6e21b5f0836de6bb0342800fab8ec97d7b1f3b851f235eba33d5ac9dc5bdb47a662290e90be2db2e67b5db89d1b
SSDEEP

384:icXNCz9/E+ndmuH7lkBZxrZwcQtSeBAIZPnyz/WFsvHWhFIJQxP/6FsScrWoSmUE:XdqmuH7qB7SxDngSsehFvEHcrJR5EbuJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/357ffc27c995eee7045a4cd27a57f0a106d59e154175b07bff8b7f505fbf326c

Files

701fc5106b0d5d1a5703e51a27ea19c3.zip
.zip

Password: infected
357ffc27c995eee7045a4cd27a57f0a106d59e154175b07bff8b7f505fbf326c
.dll windows:4 windows x86 arch:x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\KoryckoB\source\trash\repos\Valo\Valo.Tools\obj\Debug\Valo.Tools.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ