19857484383[.]zip | Triage

Sharing

General

Target

19857484383.zip
Size

563KB
MD5

8a4599a17d9c2327c121a9f5387fa122
SHA1

13985d2dc3be333262d07de368020cb44faf2b73
SHA256

279e6454f60cffc29bb9df8fc868040ec71de89b6533bbdc8b9dc4c247d2c05f
SHA512

f3830662c7d0d55788575cc0a604ff322122b4bd398170e7847397ff59765e14265ded00b2ca1bc33f942569317424c93cef8460ebcb741d0b3cf0cc8a04d9d3
SSDEEP

12288:eD8IM4CjxWmuNWDy1OWyiH1qHtFmDsI9UvKc8JLWa9npzT426P32z:mbMTjxWwDovH1g3IsIoKc6Wa0f+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/716ac0e414f59189a83624792201a9bd162759fbbe32a6ff4bd97b624022f2bc

Files

19857484383.zip
.zip

Password: infected
716ac0e414f59189a83624792201a9bd162759fbbe32a6ff4bd97b624022f2bc
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 590KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ