2c5b240b30d0b0b417bd49f1251921abf8038610e2c0b36adbbaa785adb696c7[.]exe[.]zip

General

Target

2c5b240b30d0b0b417bd49f1251921abf8038610e2c0b36adbbaa785adb696c7.exe.zip
Size

1.3MB
MD5

a8f04ea38de68898936cf1429596eb57
SHA1

31baa95ca7a01acf55056e27a6b8997bf33efc3f
SHA256

a4c91f168d5075a698914fd931fd48835357ffde5b1b2514bbc3035823e78b4d
SHA512

ca9ff5e3d8b89a770746332a2aa59091c9ba6cba9aba283e7b0b62a84d502ae6b3d5a41fa1aea114cb1e2b25ee4b5d4c554dc20a1ca79dd3c9f5a3d5b3675808
SSDEEP

24576:Ho00IcdKW9HaiTYQ76iT/yGHztCqWLcBlVMV0VpmIs5JoxEZ4uviY0G:HUIIVoiTYlKqGHQqWLqVpmIs/wfuvh

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2c5b240b30d0b0b417bd49f1251921abf8038610e2c0b36adbbaa785adb696c7.exe

2c5b240b30d0b0b417bd49f1251921abf8038610e2c0b36adbbaa785adb696c7.exe.zip
.zip

Password: infected
2c5b240b30d0b0b417bd49f1251921abf8038610e2c0b36adbbaa785adb696c7.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ