4363463463464363463463463[.]exe (2)[.]zip | Triage

Sharing

General

Target

4363463463464363463463463.exe (2).zip
Size

4KB
MD5

a9ac952214b4aeb154d92b76095c1caa
SHA1

72d1325ded97a2b9cf6cdbbc21bc70b09fd27ad1
SHA256

8731222107da184b71a7a4e9e1650522b58fb26f72198ad6ec8c965bfdce0774
SHA512

1eedc464bab931256eab4d299be18ce95b183cda8667c6a74d0645a174eceef3d94e0165fc6b3a984bfbce7212f5f960079e527c4959a40e3b67121ca56df414
SSDEEP

96:ywb5xIqd77Lq3xThhrTeRM68120cUBiIT4ddMm/lF291KRTQ1jqt+oerwvp:TIk+ZXTeG125ObUd2mdF+KZQ1jUEOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4363463463464363463463463.exe.bin

Files

4363463463464363463463463.exe (2).zip
.zip

Password: infected
4363463463464363463463463.exe.bin
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ