b9dd4874b48b324722f10d1c5baadc00[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9dd4874b48b324722f10d1c5baadc00.zip
Size

3KB
MD5

eeca3ce4eafff06e1b2762644bd93ca4
SHA1

942c0a1994e3aabd3ed310e0f96a85e7a8c88560
SHA256

102f8a2f8f6367b98162927c90626644d27128ce441fc1345fcb27b6ca2ebd44
SHA512

4cee251bbd85f04d919db781b93549c14cc7d72d5e6a87cfbff62a990045512164cc679f41d1c9e494abb376b867b55fce8ee74061b7070c406bf640e97518b5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ce1ecd041b84e9a73877f2e84c20e6313163e69ebb74d30cfbf6ad99b022be2e

Files

b9dd4874b48b324722f10d1c5baadc00.zip
.zip

Password: infected
ce1ecd041b84e9a73877f2e84c20e6313163e69ebb74d30cfbf6ad99b022be2e
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ