1e9bafd0719a576d94c0b3126c252b94[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e9bafd0719a576d94c0b3126c252b94.zip
Size

3KB
MD5

1920bf065344c6c26f0d88dab28c9d25
SHA1

67c1aaaa24eb61ab84eada6743fadee2283ab06e
SHA256

8b64085eb12905abc860b3d8d37488147b9ad33a56f32ec6050100b7af94010e
SHA512

d6162334f9e3dbe686bf37461524b61c8e1547ca8e14430841913c77c167622766129f8b94061e19e844156a442d7622d9419e5e706c9f79c48493259435660f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/967d89f5215ed8f6d30991290c764786988b40c39a24a10fe1334a3369e59b4d

Files

1e9bafd0719a576d94c0b3126c252b94.zip
.zip

Password: infected
967d89f5215ed8f6d30991290c764786988b40c39a24a10fe1334a3369e59b4d
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ