e34644f20c6f4fd1da82016e91e82747[.]zip | Triage

Sharing

General

Target

e34644f20c6f4fd1da82016e91e82747.zip
Size

4KB
MD5

a4d133283b3d1bb76600dc31a07ac774
SHA1

f866169b43ba3082167f4d68323e583b9245cd33
SHA256

2d00ce7ba8f1a5d168755062b0e3379793ae6ef06c649bc8bacc2527ef20a5fb
SHA512

835e50e27e421319ddddb3c029b36d806f71da32dcb1ffc1d063646d17ff5829157a7f87c5e4591d9730e29f0f8e8ea454087256049344621b8dc42f9418663d
SSDEEP

96:knpYOhEQnP5/TVb8Ht299ACXuKHN5xumWdGu6tC+WW5jCEc:kpYODnP5/18Ho7f3/uY3Wj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/40e716422dfc0896f3c9030071bd79fa18696506b35404fb8790340ad8bda72c

Files

e34644f20c6f4fd1da82016e91e82747.zip
.zip

Password: infected
40e716422dfc0896f3c9030071bd79fa18696506b35404fb8790340ad8bda72c
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ