800b825f9d69e31c7be8d897b0627307[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

800b825f9d69e31c7be8d897b0627307.zip
Size

4KB
MD5

4061b20eeaa5df064b5f37e64e37939c
SHA1

f1f4db5ff84f9accbf1ab203d2765f0bb978ba72
SHA256

4d58365d60a24b7bed9f44fda9696c054720bfd50909606796f52a1ef782aca9
SHA512

1b91ca5b8af5e33fbcd6d6acad35f176e01899c201bb1fbdf2a7c8d0134e52f3e4c21ec98ed36ef01b727959ce3c4f877e07905395f9a368d5131b94300c9761
SSDEEP

96:YxzAt4G9+W4D+QEGPyTLKA2MYj3zUFurcc+IwmWCE1bigF2Av+rcBcPe8Bzc:YAlSEGP/MO35gPbmu1TwAHEJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/be45b009a66b1dc649e41e162cb99d0f74c97431d10ff4d136b16022b1d03c36

Files

800b825f9d69e31c7be8d897b0627307.zip
.zip

Password: infected
be45b009a66b1dc649e41e162cb99d0f74c97431d10ff4d136b16022b1d03c36
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ