c17f68b1fd71b01020028b66036648ea[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c17f68b1fd71b01020028b66036648ea.zip
Size

28KB
MD5

23237eac20c6fc4b47ce71918961076a
SHA1

bddfa0afd83915939777d816131ad5f6ccec98c4
SHA256

53be1ff07ecf051f987e3c267c20e6acf4e158428ee5c5ecee8141d8bb7154eb
SHA512

fcc3469456eeab5da97a720bd761698909f6dc964cab0dab9a3a224969607319f621ad6a87202706b8ee2c640d918cb76e9cbf694ffd8d4225e8248969789951
SSDEEP

768:JaIonzhVD5Bsee8v+bS21rXgFZWfQDcCGVoSF6Rz0EIEaJUTu0z4CTngwJL:YIK/3s2+br1r4WfQD0osuzzKUTu00AZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6a4dc64b7df47c9397fccb7f9cf098737cfff9747a8970c039e88d226ced69bd

Files

c17f68b1fd71b01020028b66036648ea.zip
.zip

Password: infected
6a4dc64b7df47c9397fccb7f9cf098737cfff9747a8970c039e88d226ced69bd
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ