MDE_File_Sample_cc783a04ccbca4edd06564f8ec88fe5a15f1e3bb26cec7de5e090313520d98f3[.]zip

General

Target

MDE_File_Sample_cc783a04ccbca4edd06564f8ec88fe5a15f1e3bb26cec7de5e090313520d98f3.zip
Size

336KB
MD5

fb53e289d5ebf5eaa51f3340b3e6f418
SHA1

626f07e11af71a7432b4624b1c9f7d33ca0a29fe
SHA256

47eaee942b3fd8a15e44a663114d2da5788f6b88ea876b2556b29e2485e0e01b
SHA512

43275050d6ac013aa17d9f9d51b895d9155df8e3d62147fdf808f2aa6c979b04c05425215ba735f88b2eee53ae29ec8ded8e8848c99874337e52ecd67757dcd4
SSDEEP

6144:j3nbIebCL7wB+GiYlnsuMId4ujyWhXTn2k95lehAQrK/BaoKTPPMTZsX:LnbIUCIBEqTTWW1605lehhG/BaoKIT+X

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EIACalculator-2.1.tmp

MDE_File_Sample_cc783a04ccbca4edd06564f8ec88fe5a15f1e3bb26cec7de5e090313520d98f3.zip
.zip

Password: f125
EIACalculator-2.1.tmp
.exe windows x86

Password: f125

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 614KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ