19096040124[.]zip | Triage

Resubmissions

21/09/2024, 00:32

240921-av4pmawgje 6

21/09/2024, 00:30

240921-atpt3swhkp 8

20/09/2024, 23:31

240920-3h687sthnc 6

Sharing

General

Target

19096040124.zip
Size

653KB
MD5

89d9deac72e1791c33c17af2c170f99c
SHA1

436f8c9fb27b2b6a2ac9aa8cb0990c8f1ee83a2f
SHA256

2296583a8866e8ed6770b8cd6ff52f4d61f4321e88f76eaabd10751bde3a4b9d
SHA512

5bbdd8a07089bfab74b5bf4169d254f975b27cec972141939048210b5215663db635b0bd64ac41767ca3af70f237a0c8ce67aff5646a768f852b81730ada0c63
SSDEEP

12288:qPd5q2vXljyIQVJe9d/D+prmTqWWV+9Yoz/yBI+xH/Ppf6d8kg9:qVXl0VJej/qR4qSyp/P0mkO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c2c1901d52b02bba9ec081c64436c6002c6550ebf185c89af79567381455de1a

Files

19096040124.zip
.zip

Password: infected
c2c1901d52b02bba9ec081c64436c6002c6550ebf185c89af79567381455de1a
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 697KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ