514b4c4e83f340485fe6e5faefef5a99[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

514b4c4e83f340485fe6e5faefef5a99.zip
Size

100KB
MD5

e665027414ef5f064a18f6366f98fce9
SHA1

d9b55c763b957b29ba2605e6e4330e9cf0d0cb54
SHA256

cf6518d73265d01eced3be35ccdef835b8ddda7a37c70f8786bb7396ec07f5b3
SHA512

27c1399735d35d9c0ec267fab30942d21d7e16b072ead264b6094fb221099016e70b4de4ca542887b76da7847a81e28d489233482565ecea41414e089c43df4d
SSDEEP

1536:oxdpwD3z5zBn5BgzjhfEITNqzsPnwbc41Q5X1yEhL2mtJUgSavt87m35:oQ3dzBnvglNqAPnwI4q5FyEh6QGJQcQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/56b0dd9eeb90f3925861a3451fb742441e6bd85bc9a5573ceb631baaec7bf0ee

Files

514b4c4e83f340485fe6e5faefef5a99.zip
.zip

Password: infected
56b0dd9eeb90f3925861a3451fb742441e6bd85bc9a5573ceb631baaec7bf0ee
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ