07032025_0124_2663738939987542452672728827262[.]exe[.]iso | Triage

Sharing

General

Target

07032025_0124_2663738939987542452672728827262.exe.iso
Size

158KB
MD5

5bb644b98a1defeddd5b3b812d799d95
SHA1

292deaca045e4400cdd31a9594b87e8fa848907c
SHA256

2d749ee267f200f0d8baf0486fc5079d0f502d2e9c2978e58781fa88bed5fdac
SHA512

0c86122ad77d72494b712e2a76ac065d38934c6ea8874433b54159afd43f7a3f5795c84f63024988d4bd7fb3dda1a05d6448bb4ae9f4ed3ad1bf1a3c7a4c92fc
SSDEEP

3072:iZq6LHp8plAKG/el4ZneM+3M+pRW6Ql8/e:YPHgyKGhZeM+3M+y8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/2663738939987542452672728827262.exe

Files

07032025_0124_2663738939987542452672728827262.exe.iso
.iso

Password: infected
out.iso
.iso

Password: infected
2663738939987542452672728827262.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ