bbfaa3f21a902851bb39f218eb1c6c63[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbfaa3f21a902851bb39f218eb1c6c63.zip
Size

2.8MB
MD5

72890813b1b9a7922312586b67f77a5e
SHA1

0672f85d226c4dd20d53c27fe4ec080f565b18fe
SHA256

2f74dea8dde380c328e654b94a26f0d7830a957de39d8869dff9608107f56c05
SHA512

91d1acbecb18bb9b6db3661b9c0fd2b56c575a68fd159ff5a4e532d108c63094ccc0f3926db4a7a6b8cdff2a1e54aebe34becc470d9baad0417f4f694be245ff
SSDEEP

49152:a2lIugqw6rVEZV111C32jgwtq3kzzSWvJ7GR/VD4ZhBPmzv9aGuN8ntXYmm79nk:UuO6rV41k320wtq3mJCgOAz867i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/67195cc528b8f9e9632e305b5982528dd6a7ff3067a3a4e1d8887f851f31d4e6

Files

bbfaa3f21a902851bb39f218eb1c6c63.zip
.zip

Password: infected
67195cc528b8f9e9632e305b5982528dd6a7ff3067a3a4e1d8887f851f31d4e6
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ