MDE_File_Sample_87f93b51407be04b569f9f5c6247e33c2aa0442b032288c5b0eb67315b9323a3[.]zip

General

Target

MDE_File_Sample_87f93b51407be04b569f9f5c6247e33c2aa0442b032288c5b0eb67315b9323a3.zip
Size

14KB
MD5

34ad81eb361503d38ad8c8ffdea0396d
SHA1

fd405b8d982a1bf8049315e21e5c2d7af87e0a0d
SHA256

b6f76fec7b3c6467a80683ca37733553bec614210151d4a26acce7922e94f175
SHA512

97bbcc4a4baa7d3cbde4ea3f2597c7df39c5f9d65b594501322af050b55eb56d8ad6188adcb12702dc37a1a3e86d65185a523e354e22da7cd52be791228085d9
SSDEEP

384:HXLpIUcuU9gOI7FFK0+R5ruHtDB9fajDKTsGhyTw2RfCRsE4O7e:HXLpIDuU9gBpcRKlXfD/OaRhb7e

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/data

MDE_File_Sample_87f93b51407be04b569f9f5c6247e33c2aa0442b032288c5b0eb67315b9323a3.zip
.zip

Password: f123
data
.exe windows x64

Password: f123

f12299573f995fc0c70b04fabebb3e6c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

whatsapp

RHBinder__ShimExeMain

Sections

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ