2d5b1940551fc753f0691be8e2c8c2204511188e80f5d002ee4b612b46c36ab6[.]zip | Triage

Sharing

General

Target

2d5b1940551fc753f0691be8e2c8c2204511188e80f5d002ee4b612b46c36ab6.zip
Size

351KB
MD5

00f1883604104ae78397f4de2ff68533
SHA1

5c2f733afb860ceb3a30e7382c3b3598f22fd456
SHA256

2d5b1940551fc753f0691be8e2c8c2204511188e80f5d002ee4b612b46c36ab6
SHA512

1c1108f514b766cfded31fed4cbd3099ed2ec5e9bc58abf9826329705e3ec825c7fe83b92b1b31912830563d113e2ea818533f13755af537a11dd91a1074e673
SSDEEP

6144:i9NDWuzVf/CEjw0aA87kGJ8xF2E4rY1rww3G5CZ35w2lQOi8GfVK0epptLz:6USVA0mP8OE4r2/GQg2l8VVUp5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d5b1940551fc753f0691be8e2c8c2204511188e80f5d002ee4b612b46c36ab6.zip

Files

2d5b1940551fc753f0691be8e2c8c2204511188e80f5d002ee4b612b46c36ab6.zip
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE