17213d9ad4d732e11c21333cfdac7670352e87ead36af66cbe7d53fa64fef1c5[.]exe[.]zip

General

Target

17213d9ad4d732e11c21333cfdac7670352e87ead36af66cbe7d53fa64fef1c5.exe.zip
Size

4.3MB
MD5

81b16404698dc842ab62063f9e6863aa
SHA1

3d7f7b591fc6520ba429c2e42632c5f6a6330a14
SHA256

60286f2d21701bb3476ee993026c17a75f00c72a10f3cdabafe5c14a4239359e
SHA512

6979789749bd1f39b2c88a84c1d24a8cd136185b2b24cb3950a8a60e1b916f552df452ed1e3dfbbfb0e8886ca58a67be46b8532cc84581db8d7122f3099f1050
SSDEEP

98304:gYHTNe2u4ABtzPFHYZZ4FF+b2nR67FW/ULjQ+FMijqNrPy3:NHwhtL2ZiWE8bjqNi

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/17213d9ad4d732e11c21333cfdac7670352e87ead36af66cbe7d53fa64fef1c5.exe

17213d9ad4d732e11c21333cfdac7670352e87ead36af66cbe7d53fa64fef1c5.exe.zip
.zip

Password: infected
17213d9ad4d732e11c21333cfdac7670352e87ead36af66cbe7d53fa64fef1c5.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ