8f27e6b9a405e31c618e5184f0181e3b[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f27e6b9a405e31c618e5184f0181e3b.zip
Size

27KB
MD5

1a2de33ad23528b755e294779916dc17
SHA1

1d8894f6504a061ee4a0ee515f6634c7e8ba691d
SHA256

b268b6e20e5e7564972166dcaaa6fb2fc74c9ff31ee5c4e5ff19a41dc40b5a3a
SHA512

2499546dff5ca4e6ec4425eb578c09d6c8d48e6493a365a82ab7b2f1b767a7ed4ab2e32821079e86715f681a8e9048967a4ab0d630c09e3bfc34b34f13ef50e4
SSDEEP

768:WaAFpgUL+RTuklxVELQbXcCNOQ6dxBUAn7uXsPJrb:Was2Tu2PUQQCUQyjnagrb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6c071f16d84286aa60fd86e483fa7b966a74a9835251d62621bb44c37405c7de

Files

8f27e6b9a405e31c618e5184f0181e3b.zip
.zip

Password: infected
6c071f16d84286aa60fd86e483fa7b966a74a9835251d62621bb44c37405c7de
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ