f42aa0a453a433888809f12aaae24e6591e567f1e3431f81a5be9003018e650d[.]zip | Triage

Sharing

General

Target

f42aa0a453a433888809f12aaae24e6591e567f1e3431f81a5be9003018e650d.zip
Size

344KB
MD5

0cf6d1ddb8b202b07ee40a2d6bbbbaf1
SHA1

8e1cd2dfea912e3982cab75de05962c71c3879a3
SHA256

f42aa0a453a433888809f12aaae24e6591e567f1e3431f81a5be9003018e650d
SHA512

f89f3361d58fa82c6797d28d1ab71905e410df3b0a539dc25e0ec62f5055e8cbe7e1325bc334c742b71cc62c4f137d512a5f6267590100c72aa9e470df309c43
SSDEEP

6144:DTU/zEzdN1rJOKO3JYBm7vSnBtFVJgHafwEJ5hQ9PvC9IzSDH1v48kRNaITLFX:/y2d3rJ1VE7v0XFVJowxJ5hsvuIeDd4F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f42aa0a453a433888809f12aaae24e6591e567f1e3431f81a5be9003018e650d.zip

Files

f42aa0a453a433888809f12aaae24e6591e567f1e3431f81a5be9003018e650d.zip
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.BSS
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE