9d91f243d8d030ce3d37088ca34120bd[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d91f243d8d030ce3d37088ca34120bd.zip
Size

374KB
MD5

689b7a6ecf108155d47da7fa03e11070
SHA1

7375f37736a693feec4e70de0bc87450959d3b98
SHA256

c97e1fc8554dcc76e1db2c0a26e52a073ced7f3dc041375b6d50aa12dfa7a402
SHA512

37b16f5de75195e6b3d60c8e314209b3b0d580d9c26cecb5089518a6d3bfc28d5b4098a33f908b5021af3b7fc63ff8e5a87ded60342f6989f91d648e64331848
SSDEEP

6144:vcrJt1P+XLBCXA4tNW5OsFiY9/QymiumoYbrzkAs++NsQo+8Emg5CFMqOKaWLeOj:kXcX9CXA4tBiiymPY79s+IsQv8RcC/LB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4211b78170b97754543dbf712f91da512e5f2361471d7cff1dd74b9a3c7ab613

Files

9d91f243d8d030ce3d37088ca34120bd.zip
.zip

Password: infected
4211b78170b97754543dbf712f91da512e5f2361471d7cff1dd74b9a3c7ab613
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 430KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ