03ca4bac33ea47834a5294d8d110d25e8b585f7fb61f40f9e10e69cdfffdbd7d[.]exe[.]zip

General

Target

03ca4bac33ea47834a5294d8d110d25e8b585f7fb61f40f9e10e69cdfffdbd7d.exe.zip
Size

24.3MB
MD5

e26ac93f55caeeceaa40a586c8e16ad3
SHA1

418291510340354a92e033caa2fb4028fad6de74
SHA256

b5908e95d1a7715cf2b090f031b0c3cc02f4377a423a98271a016596eaddec08
SHA512

7c73644b67fa0495275313fa92b8a7e261705f146021aaf444befa4b01ff29e345dae48cf2fa93e962390cb5c5523b4dc3529cd76ea878a6ec8ea910dec11ff7
SSDEEP

393216:h+CfSLePLx0iCWDFNzBUET1E0bD+CKBoW1EM/h8e4fuIdqzsr/W4VvsA:QCani1DFT1E2D+QW1XZ4fJSY/WuUA

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/03ca4bac33ea47834a5294d8d110d25e8b585f7fb61f40f9e10e69cdfffdbd7d.exe

03ca4bac33ea47834a5294d8d110d25e8b585f7fb61f40f9e10e69cdfffdbd7d.exe.zip
.zip

Password: infected
03ca4bac33ea47834a5294d8d110d25e8b585f7fb61f40f9e10e69cdfffdbd7d.exe
.exe windows:1 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ