4363463463464363463463463[.]exe (4)[.]zip | Triage

Sharing

General

Target

4363463463464363463463463.exe (4).zip
Size

4KB
MD5

62396f5b1e0b3a65f1e3890e531b29b5
SHA1

857f9ce34b7066c751b00522a0369f28326ba7f2
SHA256

acc68337ea679a47248a05b92f5e766f2a7899d023b455f13159e66afce27402
SHA512

616eb6a576b940f7d65918fb6b478b955fd81ac18a1d6ded0376fcfae4be0c4db12d5b322249b39e4f75f73b1506bc7038f4407f2ad9f130b1a0e3ef3c65a9c8
SSDEEP

96:OSJvaDNjR9qi+dajrc4AgQ91V79sCbzTkoWxfEFXXpUobIqlg2iQvXFWRv:OoaJr+icXTHkoS6JUos26QvXF6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/4363463463464363463463463.exe.bin

Files

4363463463464363463463463.exe (4).zip
.zip

Password: infected
4363463463464363463463463.exe.bin
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ