2[.]3_Archive_2[.]3[.][.]zip | Triage

Sharing

General

Target

2.3_Archive_2.3..zip
Size

44.8MB
MD5

ac8610ac10451b2285d354b341d8f461
SHA1

3aabcf33df2124d52fa1e0cd3245646597848ce8
SHA256

0916e95325c9cf02dc0d36fa64a668cbca0f785776529056b3beec27a8c379c5
SHA512

6ab7ed05b35fdef91ac9713c5887e55853818ade522d207653a583bba0b2d869f931a7fa317a8242c7da03aff36951b78794c19f9af2990fc6bbc57f212aeb81
SSDEEP

786432:Bmn/DnSue4djrzThFmv4Dh0XhyMUqY8Hbgl3WiuxDTTnnbUjK9YnOpX4o/:Bm/bDecrzThooh0XhyMUqY8HJiuxD3+6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/setup.exe

Files

2.3_Archive_2.3..zip
.zip

Password: 1221
bat.dll
setup.exe
.exe windows:4 windows x86 arch:x86

Password: 1221

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
🔐𝐏𝐀𝐒𝐒𝐖𝐎𝐑𝐃 1221.txt