4bc84a1a436c849698fd54c0f921c2a1[.]zip | Triage

Sharing

General

Target

4bc84a1a436c849698fd54c0f921c2a1.zip
Size

399KB
MD5

d7c0fe8c96a507000c4c9b00b80190e4
SHA1

e6cbe2e13d1083ee283a141ae847d452a07752bf
SHA256

38016d49c2c7455dc7bb9db0061872032c2041f7266801fadc404e7b0bf6c40e
SHA512

745abe5b834874c1af1c2a8a0e1ed913f127e44ce2c62d9eac4a67f66c877c52812179f6afe2d6abe939be9ae52d671820e57b66ba748b3b883582cc70708f2c
SSDEEP

6144:75wPrtNT0bmE7kEY1oBPR+TC96s5MrKPZNxKQzo1oRd/EsSQ8n81A2J9ZDwgF67:NwPrtx01kQwTS5Mc/E1WcsSQ1/wgFe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/25e5055023abbb8c18992618b6f04c94b8b13ff8bd33d4a4f8462d92902461bf

Files

4bc84a1a436c849698fd54c0f921c2a1.zip
.zip

Password: infected
25e5055023abbb8c18992618b6f04c94b8b13ff8bd33d4a4f8462d92902461bf
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 458KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ