250203-vzamkaxne1_pw_infected[.]zip | Triage

Sharing

General

Target

250203-vzamkaxne1_pw_infected.zip
Size

509KB
MD5

422976fd241ed0968b67d52c3e899254
SHA1

80e12f8a6a95b7110fd588d833443efe207b2587
SHA256

4f1ba7440d20500ac5a379c9eca60991ae571b460fc01f1146c75b5e2a005d30
SHA512

c25a2b7b1a5a4d27d38a2cd6ce29c92a609f29c976e6e74b66bf16470bc4ebb2cad2dc19726c330c6cf1f36056a72b9d5b71f6da60461bee644a63557fe11c1a
SSDEEP

12288:hSwl1CObPsSMMswnSZGyB+UKPJefRCgOz4uxeTty1Fqit+s7:hSE1oSMynZGoH4AeI1Ws7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Week3.exe

Files

250203-vzamkaxne1_pw_infected.zip
.zip

Password: infected
Week3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\Client\Temp\hDfjaWdXku\src\obj\Debug\StaticArrayInitTypeSize1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 742KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ