75dff09326c4cc734691ce1e956b4597d82d95e9677ac6e72b0e60339af631b9[.]zip | Triage

Sharing

General

Target

75dff09326c4cc734691ce1e956b4597d82d95e9677ac6e72b0e60339af631b9.zip
Size

355KB
MD5

e7a2cf05e0397ccc2fae3fb3b44700bb
SHA1

3d849c354c686c6a8ea0dd210cf3eac7df237f64
SHA256

75dff09326c4cc734691ce1e956b4597d82d95e9677ac6e72b0e60339af631b9
SHA512

15e05afe0d544bbe48174e3cb23a18590e6db7e123e95c898e49b9acdcba8ea97b95560e5070e5b6808677c7d9ae2e4fc28e87338634ce8222e8ff442f879413
SSDEEP

6144:h9n8U3K2IZPAl0iM1OmQG2IAamRKsOWcqO8SVM6+dJyri5HqyE9BLoim7NDR:38UrIZYl3YOjyAY/WhEadJmi7PhR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75dff09326c4cc734691ce1e956b4597d82d95e9677ac6e72b0e60339af631b9.zip

Files

75dff09326c4cc734691ce1e956b4597d82d95e9677ac6e72b0e60339af631b9.zip
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE