21112024_0625_20112024_DATASHEET[.]iso | Triage

Sharing

General

Target

21112024_0625_20112024_DATASHEET.iso
Size

692KB
MD5

7515f214e575b15d4bd7fe53313f740a
SHA1

72e3407fac6be13dc2466fef02fca2ebc6d60dd6
SHA256

7804d202444c674f18d777634af6d2778ddcadd331b1cc5d8ab590a8561d66d4
SHA512

35bc4e6fd749136b83b8bad5eae2da51fd70a10c46f9d4a16d5fd3ffae0dae11d0f224ae6324f5024dbfd7777ba8634f1a3af4359d67b00933af9f0847107614
SSDEEP

12288:q5AgFd918tPwTfYq1ZtoMxf5Cs814Aq/EamrnJuiu01x/pC9:8Ag6wEMZtoMSs8DeEamlxxC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack002/DATASHEET.exe

Files

21112024_0625_20112024_DATASHEET.iso
.iso

Password: infected
out.iso
.iso

Password: infected
DATASHEET.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Aezq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ