194da8aa4c0d00e20a4915c21643988397c2b5c8823f4cdc3c75f97acf0b977a[.]exe[.]zip

General

Target

194da8aa4c0d00e20a4915c21643988397c2b5c8823f4cdc3c75f97acf0b977a.exe.zip
Size

1.3MB
MD5

bbea436c49f13c2b7a00049cf5eb954b
SHA1

4d3cd5c1aadac911ffe3969d89cdfdcf4310b373
SHA256

8dec776a65daa68cc70d4f0fba886470cdafc132d19d482a461e1d3e892e4f60
SHA512

9d53aae3c0485da8471740f3c9892e641a44329a572eb11f322e33f3486f919078991007c90946c7f0c6a4a0a29060d5422c3dfe68f80f302a65a369a72e466a
SSDEEP

24576:HSApvMcWb6XuvHsdi/KHbIAQgCv+Y4w4RFUoXuv9LrikOEsfmzl0M7Yf5CZA6fR:yAlubMCN/KHAmw4soXs3ikOEGmz9Yf5G

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/194da8aa4c0d00e20a4915c21643988397c2b5c8823f4cdc3c75f97acf0b977a.exe

194da8aa4c0d00e20a4915c21643988397c2b5c8823f4cdc3c75f97acf0b977a.exe.zip
.zip

Password: infected
194da8aa4c0d00e20a4915c21643988397c2b5c8823f4cdc3c75f97acf0b977a.exe
.exe windows:4 windows x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.code
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 795KB - Virtual size: 794KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ