a56931bd5e8d52a7185f7ae387f4d3738415f90b141ab5e662d87f06d83e4b00[.]zip

General

Target

a56931bd5e8d52a7185f7ae387f4d3738415f90b141ab5e662d87f06d83e4b00.zip
Size

34KB
MD5

0365224ff933c2b2324b745e602d016b
SHA1

312739becd7d1c8951feb754a4d3420d981d0f7a
SHA256

8143c4ef4d2fb1702970981f3f052a77a5c924b3189074772524d6c01ddf6e14
SHA512

a2f27e4fc517f24ff8d438b82cef2c75cd71c15739d1b582b51956297c2050867536a4743d364bcef7550e80d2f96968eeffb82858a8dbecd697237e6b32fa32
SSDEEP

768:1P5PpKhkq26lFO7Cr61Nex6rfOvCe6t8oqSIevWz:1PPKhkbf7CrWNA2fOad8oC1z

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a56931bd5e8d52a7185f7ae387f4d3738415f90b141ab5e662d87f06d83e4b00

a56931bd5e8d52a7185f7ae387f4d3738415f90b141ab5e662d87f06d83e4b00.zip
.zip

Password: infected
a56931bd5e8d52a7185f7ae387f4d3738415f90b141ab5e662d87f06d83e4b00
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ