19272778656[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19272778656.zip
Size

16KB
MD5

08f472b59275b8db3640344acff324d0
SHA1

fff5b5ce0870ad624621ec3fbb92aebc976f1e0b
SHA256

5a0c1c77c3388298920c7cd4505bdc504e085f02d4c84b01f24346ff746d2730
SHA512

3b96038cecca2b4fa73f1df8bcad2078084391aa7e3f25b542edf3bc4c88bc21fb167fe283303782277127989969be6e0fba106cf7c2b3ae6aa241d382380b44
SSDEEP

384:weJOZLq9tZWOU4zHdpIZV/THs8Rl2IERbyXPLlVYDW8BG27TP:wm0LEEm7dKP/fnGrBGyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c4f981f1f532ec827032775c88a45f1b4153c3d27885f189654ad6ee85c709c1

Files

19272778656.zip
.zip

Password: infected
c4f981f1f532ec827032775c88a45f1b4153c3d27885f189654ad6ee85c709c1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Aperx\SerpentStealer\Serpent\obj\Release\net7.0\win-x86\linked\Serpent.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ