3cf0b8a0dfefe20d4e9c633113126548[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cf0b8a0dfefe20d4e9c633113126548.zip
Size

4KB
MD5

2e51a259c6b74936e96f66592425a2a0
SHA1

1391c31c56285fae40ac2938626338a48500e892
SHA256

e11ed1719dd0726d1e86726315eae858ffff0be19520cd172efa6f3f1af880aa
SHA512

3cde72507a110621a9e83d86dcc9fef07ecaa805bc341febe00c5c8703b0034dc895deaccc45628f7339388b64a29e389cd5e3d7f29423d4c6e0a38d6e788589
SSDEEP

96:6CBRG1wBa/jUzvwzoudu1+E6GgtA/fnYJDodP3b1Gh9EaKCC:66E1kTvw0udxGIOkEvbgmaKZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/886f176e93a57a1782d2ecb519c10cfd1290325d55748a99ad742190a59f3106

Files

3cf0b8a0dfefe20d4e9c633113126548.zip
.zip

Password: infected
886f176e93a57a1782d2ecb519c10cfd1290325d55748a99ad742190a59f3106
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ