de042e38d84cf16252496d8330eacf1b[.]zip | Triage

Sharing

General

Target

de042e38d84cf16252496d8330eacf1b.zip
Size

471KB
MD5

221b43458df7c70b32c9e98e938c7ff7
SHA1

476c10697627ef5a46088285c30b0e8ddf669d0c
SHA256

be76309eec12e3eada6dea02b6f08f4db9468953380bec1eddbf452889f083e8
SHA512

f5b0cf4346280c532106b06ea85f5e6a52ffda6acc56f08859d1382a8a231367d36ac29f8fd074ff6f545f8e7c4a0eda3f3274e816616e04ca6e86834d958f0c
SSDEEP

6144:2aBpav0OHPgVcGlJ5tNS+prVmnqP2y/F1PZ2nvM1bMeTdwBi4k27ecRhXrXhlk:lpNYPgCmJ5t/prkqcUNRyzT7h2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/64c3c3a5004d786f14ced03e295463bebaa1ab08c59b8287001c15aac69e3521

Files

de042e38d84cf16252496d8330eacf1b.zip
.zip

Password: infected
64c3c3a5004d786f14ced03e295463bebaa1ab08c59b8287001c15aac69e3521
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ