b4f2800df2961e55aa5d571758f6e0ef[.]zip | Triage

Sharing

General

Target

b4f2800df2961e55aa5d571758f6e0ef.zip
Size

4KB
MD5

d46173447ace78b3dc4fc28d21f66802
SHA1

a11df24989433f032fde01c17d47c378a8433bcb
SHA256

7be64d6c8b121b2dfa133e4d5afdc7dfb5b09698fa199125f6b81d9c3cc07f3d
SHA512

9b0b264d275370c08ba4e02d106285bee14010957ea6f04a6ee46944f0001f2fabc1551c082b01784e5817ef557ccb12fcb0932f9fff95114fba1ed3935c5b39
SSDEEP

96:n9MQTelfcK/JREw9SzH910f0WOWNlLZ2DFJoRxD9uNFiaLN6r9K:nBeNcaE7D910f0W3NlkRJixD9u/LNIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5e764d6d6c109824b25ef91b4d9fedd50ce87c100e8dadd8117d7c6fbbfd71b7

Files

b4f2800df2961e55aa5d571758f6e0ef.zip
.zip

Password: infected
5e764d6d6c109824b25ef91b4d9fedd50ce87c100e8dadd8117d7c6fbbfd71b7
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ