5bb7231d44b93dbf6c058100279a880e[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bb7231d44b93dbf6c058100279a880e.zip
Size

2KB
MD5

41398c7d8538c87e32c6840151bba98e
SHA1

b9fc628ac83fbfb1e4fdbc0eb3cc78328e075840
SHA256

5546bac255dd30a50a45630350b826dae7d6e63b152d69dd0181b9f04a474737
SHA512

2c6043009354eb1ec9d103a2101e5ef6a3e12f020e52b5ec9c1a86d779025ab2c869a8546ee9d529b3f89e06ee800ee4be2fbb64d4521507d9af871db97f8d77

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f3ecbf7563ca4b8383c0a46857a563e9a78a485b33c373f7cd601f2666dc2a5a

Files

5bb7231d44b93dbf6c058100279a880e.zip
.zip

Password: infected
f3ecbf7563ca4b8383c0a46857a563e9a78a485b33c373f7cd601f2666dc2a5a
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ