f38e76a9f003a5334f17a4364b52ad85381c19bad26dcef4e0f3ab136531fcc8[.]exe[.]zip

General

Target

f38e76a9f003a5334f17a4364b52ad85381c19bad26dcef4e0f3ab136531fcc8.exe.zip
Size

4.1MB
MD5

d931bc884e39a6e9c18efa9d752ad8ab
SHA1

a28f603d9b15a2d3ca3a16bb0c4896deb468c9e8
SHA256

a84062b6b4f33f97baba8821c95014e4777b28523fbb69c6aa6bf1eee4cde898
SHA512

b7af05771fdd17a50b0a91b5e883f8f58bef1122f04620b3a82a0d67ce1f5a20ac12e46feadc1839e3f85bd2f10a8691e6b814111f381f8fcadecf1be2118b8c
SSDEEP

98304:DeZTFb96m+u/5+a9I0mAApAx/sXbSMfSmuxd0dNlfh2u6pirSHO+c:0b96m+a5+a9I0mpbbSMtuxdI/fh2omHi

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f38e76a9f003a5334f17a4364b52ad85381c19bad26dcef4e0f3ab136531fcc8.exe

f38e76a9f003a5334f17a4364b52ad85381c19bad26dcef4e0f3ab136531fcc8.exe.zip
.zip

Password: infected
f38e76a9f003a5334f17a4364b52ad85381c19bad26dcef4e0f3ab136531fcc8.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 138.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dlib
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE