2f181dd57a13154c28d558ab26a4d8b6[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f181dd57a13154c28d558ab26a4d8b6.zip
Size

4KB
MD5

b2dd4862ea6419cbe413151205ee3672
SHA1

1d5ae5d21637e7e2e0a9eaaf56f54fdf8826d9c8
SHA256

8a3b04e30befbf14510ded2ff45daa1740ba3939babd8f9382c23dfa61725a7d
SHA512

19703ed4e54f33061a276732f89fc019ce9532148735034f7904fae38472f6c9f46e4face8889c19078edb239b1dc556c502a18074f016808115591a87bb9866
SSDEEP

96:0oZKOJi5UfEOnT7IgphTy8uBeOofqkwNI/EYi5aL9ifKd49XN1K:0atJi5kwgnNuMOobwNVYmyof4iY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/753195454a60741d52951f66338eaaf5b8240a29dfe4e4815e0e554e9d0248ff

Files

2f181dd57a13154c28d558ab26a4d8b6.zip
.zip

Password: infected
753195454a60741d52951f66338eaaf5b8240a29dfe4e4815e0e554e9d0248ff
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ