27af7e5f107cc023abc0f67bc4cbdaef[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27af7e5f107cc023abc0f67bc4cbdaef.zip
Size

4KB
MD5

fbb26c5965f5c78f9e601c5c8511ce22
SHA1

61ef4a26a8262844b6393a48c9dae23596ac69e0
SHA256

239dc7b58198e3bcf7428a811339b22de8f4ba35c647371c91f2b54f3d975ed5
SHA512

441b88a594deb2d3c73d9b9e0b763388d7f63902e9edcf2592016cf79a6057810f279fdc3a3bc2ee38a0fb169c8511b280f796e1979c36e841939f5cf5c74621
SSDEEP

96:dpEpFIUbhWn1/oiMU5ry2ekT7v23DggGR+ztm6Do:QpFRbhW135rylA7PH+hm6k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f5a49bf234d5468a82b183fe238e3df3691db9da773b33228c02331e4d6eff4e

Files

27af7e5f107cc023abc0f67bc4cbdaef.zip
.zip

Password: infected
f5a49bf234d5468a82b183fe238e3df3691db9da773b33228c02331e4d6eff4e
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ