3[.]zip | Triage

Sharing

General

Target

3.zip
Size

597KB
MD5

385b52b9a333dce2296ea52fb983028a
SHA1

4e9dda725e666f742927db9e97da332996542784
SHA256

f2e11971895406cfd1ae3c9427d7596bb36d72f45de6d366891253739f625b0b
SHA512

e523d848b9f6966dda6d216a86a78f2dfda539ddb08383359947b38982f6dc217afd625b0eb413b11e4d87ace7c88945a423f3761e9192b2d366b938739f3b4d
SSDEEP

12288:eFkgr5an1e8IEZTNMePsgm6KG5FNxx/hO8Y9Br78hEPG9/ID/S:eFTwCExKeJjK2Nxq8pEPI/v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/U5jfeIGqS6smMA3.exe

Files

3.zip
.7z
U5jfeIGqS6smMA3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 821KB - Virtual size: 821KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ