8a6bdcd981331edbba2152d71cb4e900f7149fe22b6f19548da95407f2b48fba[.]zip

General

Target

8a6bdcd981331edbba2152d71cb4e900f7149fe22b6f19548da95407f2b48fba.zip
Size

16KB
MD5

a05a51be5cf77da5717acc3532d9e1ca
SHA1

71abfa70ef1a0f9c8ddbcbd64fbda7d9e79939f8
SHA256

032ba3d176ffba34ec2516ac9a973cf836dc49c16c6dec87618774c002d68d10
SHA512

461168272ac478e191a91ff3a08fd778457692e17eb06980c6829361e052b98b06a270b27fd7fbe611431e33e00857a1eaae647e51af31e5667aa9532db8f076
SSDEEP

384:8sDb76BQw+1Ov5er2ZX9gOoIZS8GeRWrDiP8XxBDPF3qB:7DDw++er2ZX9gIZS8Psa0XLPF3A

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8a6bdcd981331edbba2152d71cb4e900f7149fe22b6f19548da95407f2b48fba.exe

NSIS installer 1 IoCs

installer

resource	yara_rule
static1/unpack001/8a6bdcd981331edbba2152d71cb4e900f7149fe22b6f19548da95407f2b48fba.exe	nsis_installer_2

8a6bdcd981331edbba2152d71cb4e900f7149fe22b6f19548da95407f2b48fba.zip
.zip

Password: infected
8a6bdcd981331edbba2152d71cb4e900f7149fe22b6f19548da95407f2b48fba.exe
.exe windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ