34e1ca3bc192c23ee0805cd9b34ee8d396299640738946440e1a3843e7eee4c4[.]zip | Triage

Sharing

General

Target

34e1ca3bc192c23ee0805cd9b34ee8d396299640738946440e1a3843e7eee4c4.zip
Size

671KB
MD5

9c767597abd719ccf4487fdc568000a1
SHA1

74a32f7aa9ead493c25895a041333a980f048edd
SHA256

34e1ca3bc192c23ee0805cd9b34ee8d396299640738946440e1a3843e7eee4c4
SHA512

a8188645162db43110f2b3927df5e931a6c5f33671195184f99cd3eaabc3d56abfaaba256b863298214ef809bf55f9cb646362483f7c7be4c665346f545bb1fa
SSDEEP

12288:mSCqz+tLnWm6EdfmlQJBwCM9MLVWXvhGzyDRlJ0LEnSvdP2i4zFWx:mSYtLnJ6EF5JBVKMLwJv4yiduJJWx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INVOICE #R684.exe

Files

34e1ca3bc192c23ee0805cd9b34ee8d396299640738946440e1a3843e7eee4c4.zip
.zip
INVOICE #R684.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WGrr.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 782KB - Virtual size: 782KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ