68F12C8C12[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68F12C8C12.zip
Size

1.6MB
MD5

67d8570d76c612a4c0196ea0a7587c35
SHA1

c6b97ca1f01360b50dc4d24a4957792eb560e9f3
SHA256

4e32689a3ee4ec6a3021df1465e3a54942816f79c997eee2a9a6570100f69e91
SHA512

ca0376091160e80d4f8ace68e33af73724cdd24183913398c451517ad4e83ad37fd41be6dc727dbdb0027010223bc5545a2c49df90d92d517ac521053b431dee
SSDEEP

49152:ygww2jN7KVarqladVaxI46Ndz767dAwfHfx5Z:JlGNnrqodVe0MLfx5Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/68F12C8C12.exe

Files

68F12C8C12.zip
.zip

Password: infected
68F12C8C12.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ