17102024_1344_16102024_101624[.]zip | Triage

Sharing

General

Target

17102024_1344_16102024_101624.zip
Size

539KB
MD5

9a6cfa079805d6d40178a6617c50cb8c
SHA1

1aefde4ffd022f1f031819b884f8204b27349424
SHA256

e003a0859dcb91f1fdd140589cb6ee184ac34465e1af935f7f5c262ae3a4d70c
SHA512

f64cdc0e46551d70282ca162844d6a384890bb6e938852814b45aeceffed913a220b3ab08277716d14abc42ed48ebda6354d9c8158764800488470b8e350fb76
SSDEEP

12288:EP6STFrpgUbPEXUctXLOksK1A348DrpbHV0PNZCGpSMJ2w+hWC:nSY8lct6ks44rDFLV0VZfB2j8C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/eUJXFbdYlsElzgS.exe

Files

17102024_1344_16102024_101624.zip
.zip

Password: infected
eUJXFbdYlsElzgS.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fTB.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 577KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ