3402e05f045b396342603e21db98db0e[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3402e05f045b396342603e21db98db0e.zip
Size

17KB
MD5

54e14ba3e6c4c37c29c3c6f23c65428d
SHA1

bd593bc24b1ebd286f2c987ba95a9e0629bd9128
SHA256

9340e549234cf3b517e13429a29fb3b42374cc2241e30313588da5e9181e252b
SHA512

70cf3ab5b52420fbe159af5736faf5beffe11be4b73c25f8b577acbb097f019f6dfb56b2a363023bcf1af91119a2c413917d50056181d090c7974470d826bfb4
SSDEEP

384:ISY0tAes2Du6U+IQePkISK2VBL+aJNLWadDsROi6CEoneJA:IS5t42DqdMIAh+AkagcCMJA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/299674353e4f14ceacb82161e30f650cb50d630b71cd61877a7a0c3f7051330d

Files

3402e05f045b396342603e21db98db0e.zip
.zip

Password: infected
299674353e4f14ceacb82161e30f650cb50d630b71cd61877a7a0c3f7051330d
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Users\alessandro\MEGA Sync\Programmazione\Visual Basic\svchost\svchost\obj\x86\Debug\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ