669fe4893019ea2c85f66174cdd3667e[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

669fe4893019ea2c85f66174cdd3667e.zip
Size

205KB
MD5

69c2499f5aa685ae333615db1d6bb85a
SHA1

6d3d64f323f558314a1a7cd1e09eace0067315f0
SHA256

8de7385e7147383ecc3ebf4ccf5b8e45bc7f4c4844963667a563f70d2c4b99b1
SHA512

869617e476e2381c8fbe6efa9d4aa7a456b14122d8d6c7998380b25dacafe37b08c086ea21ade635ace6a15d4a64f7b68e3af71011b969008b5bf156324743d2
SSDEEP

6144:ZmNiYjkb/Lt+Zl/8mBBkrh6imjx0TN/pm+RkRCZYPZjmpZ7:ANfjkvtClR26jxit01R39mpp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/88e3f004f64446b8fafaf2e78559bc40fee851c14cf2d76ad49cafebc8d62b28

Files

669fe4893019ea2c85f66174cdd3667e.zip
.zip

Password: infected
88e3f004f64446b8fafaf2e78559bc40fee851c14cf2d76ad49cafebc8d62b28
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ