f12ad493e8ff6a12268d600060d0226e8cde301514822022a56e2599bf6e3dda[.]exe[.]zip

General

Target

f12ad493e8ff6a12268d600060d0226e8cde301514822022a56e2599bf6e3dda.exe.zip
Size

1.2MB
MD5

2036adaf5d7ca889a407c475fd686a1d
SHA1

da79cb388b6c09fb83d3f077a573d14858279b9e
SHA256

5001f0d674269f52ec7c78bc028e31fbf9f3dc5d630d9b8d652cb7ca66cb6eb8
SHA512

e58f7452e38d2a488c979d0c91c5a958a2f865c20083d861eb8f7060b6be86220ee708e0401c1e39d497ee56af433a33c2de8fb4b8e38790786cf11dc5f4190f
SSDEEP

24576:g9Rtvsi0lgl5CxqXxIIDiqfRU9DcoR5QqbydO/OoxKgmte0aNpIdlodTDa:wt0lgnCIDiUkA4DGs/bKgmIPXPna

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f12ad493e8ff6a12268d600060d0226e8cde301514822022a56e2599bf6e3dda.exe

f12ad493e8ff6a12268d600060d0226e8cde301514822022a56e2599bf6e3dda.exe.zip
.zip

Password: infected
f12ad493e8ff6a12268d600060d0226e8cde301514822022a56e2599bf6e3dda.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ