law[.]exe[.]zip | Triage

Resubmissions

17-09-2024 23:08

240917-24ycrazclh 10

17-09-2024 19:54

240917-ymk5ba1hlf 10

Sharing

General

Target

law.exe.zip
Size

558KB
MD5

592adf5fb51e7c614b8f131381175e5d
SHA1

7c9511c59654d9dfdb2a7d0fdab9cc353b8b7f87
SHA256

a7ff0e0b901c2f9cfc1d6ccb3217240cb3245360136617f8b880b657a6246421
SHA512

d32f6ee88e9cfc5962ae61f742ede0eae8bd40a64815c8aac1b0c8b6390d760950b13b330e8d38b46d662a7d4701f307aef0fb987c9daea6818db3a8f0033538
SSDEEP

12288:zmXd0N+U7Sxcnm/kiH72Yi8ltxtkfF5LsaWD9DJWVFoZ1mRouPUW:zmNS+UGmnm/gYXt8sv9DJfSRPcW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c7513589f3f2e02007be1301c2f08c8809ea7526d85d7efcaf3bccf767a38855.exe

Files

law.exe.zip
.zip

Password: infected
c7513589f3f2e02007be1301c2f08c8809ea7526d85d7efcaf3bccf767a38855.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 663KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ