d3ceb01d1cbf112f1181951174e93d16[.]zip | Triage

Sharing

General

Target

d3ceb01d1cbf112f1181951174e93d16.zip
Size

416KB
MD5

5c268c55aa9c2c7948320bdd31b95160
SHA1

83e21fcdefe74c616d533f5ad5e9ded933908285
SHA256

dea6058222789eb6b975d65d5466b13fa6e888df7c2a8cdc37f8e3c5fafcc3d1
SHA512

fcfae271d969592904091d4db00160e3bfebe4a8616e296eace2e0b4a47aa03114a4628003c6d066d9ff05369d41fc8cb833e8fbf7e9a389d8344ffc117ee1f0
SSDEEP

12288:C2LbwblgsTqwbTxNMERsmsXJvS/K+uZmfpAS:C23w0wfUSSQfb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f8c2d13c773462493b788554cc0dffb3463707dee0d4684e5bece3177d5bc457

Files

d3ceb01d1cbf112f1181951174e93d16.zip
.zip

Password: infected
f8c2d13c773462493b788554cc0dffb3463707dee0d4684e5bece3177d5bc457
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 459KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ