0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879[.]zip | Triage

Sharing

General

Target

0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879.zip
Size

351KB
MD5

6fa136cd6c6783c3ac2c46717d39a199
SHA1

f2fa3c2822f03532136a7c47edf4ff6bb048f353
SHA256

0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879
SHA512

b0e78aa9686c26942e28f8a8a5a9ceacfea1815325c6c17e80e8e2fe26ac9ee9f410a5c0dabf401f9b81e36d88a6a6de51d332eea8f1caefb35d452599a9bc3c
SSDEEP

6144:J90pJN5m3D3RzbyZXflCTnC1aNfPKSSx1L0uSnuwN2C5Hes:vc+DtbItUTSSyguwYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879.zip

Files

0e91eac891958e38f3d996d3c86c1d61df27a887d062140f6fd7913afcb66879.zip
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE