d3684b235b9d5f51c9fb74b54e005e19e7038b772df2173ee4cb8bfb43b8bfd2[.]zip

General

Target

d3684b235b9d5f51c9fb74b54e005e19e7038b772df2173ee4cb8bfb43b8bfd2.zip
Size

1KB
MD5

51ea9e211fb443cd29a7812eb141f57c
SHA1

63ac72ca2e41690cfc4b018798d8ffb5eac8e9c8
SHA256

d022ae6b7e40fb9e6c8fe80a1182ce583c34819b319c5d31173d317fe73e01f0
SHA512

d37b85f1ddbbcdf936d632326a680e1a61d56e546dc7895c419100fc68068454c3a25607404b31d717473e7c7e2cf0abdeaef8f5e56ef345d7c34949249214e6

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/suAauQfq.cpl

d3684b235b9d5f51c9fb74b54e005e19e7038b772df2173ee4cb8bfb43b8bfd2.zip
.zip

Password: infected
suAauQfq.cpl
.dll windows x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ