78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f[.]exe[.]zip

General

Target

78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe.zip
Size

1022KB
MD5

2bd4dcb231cec9a554e65ac1cc4654cc
SHA1

bd8f92d9dadf8a4337f7adb30feca619e728dc7a
SHA256

b8e95be3dd9991a3dd58229bba3105830f0b077a8c2eb3943086e4de25128899
SHA512

be247d353b9ce0119c5e731a5dbb80d349ca0a80ea19633d70976fa3cda409a8c8cf99a9ceca26901db9def1b50486590bfc07b15f7b02d8ef92ed002f9bdb39
SSDEEP

24576:ad/Z43uSn0zdX0Pvf4hwCZZCymAOKBtMBf2xv+W6gpp5kjWJ:sR4T0pX0P4qeZJpOKBAMmW6Abkj4

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe

78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe.zip
.zip

Password: infected
78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ