9870994f5cf18c0bfab421a96d171478407bdc8f57a4555633937be57c53efc1[.]exe[.]zip

General

Target

9870994f5cf18c0bfab421a96d171478407bdc8f57a4555633937be57c53efc1.exe.zip
Size

74KB
MD5

bfadacfa9ffe1162ef12e73dea0b55e8
SHA1

be7b25f9eec9eac061e45f853ac4983625189a97
SHA256

4fef4c3726eb95cee9a6d08220e2b094b744596ea674b090c33f2b1f63e3eb4b
SHA512

faf5fad6ae8cf715f5f56d59ba97ca7404a69466a6c566e56a9fe44621886e204651947bf951dc8c3a788b5bb17e5c95dcf97b280a0535ea90db9785dd161b45
SSDEEP

1536:W3oDWaemS5FimN1krydW6jFQc4PinxEwk8FQbN3biwSYG9YxpyfJF:7DWnn5ZGrydN6inzk8MN3b9S5Umf

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9870994f5cf18c0bfab421a96d171478407bdc8f57a4555633937be57c53efc1.exe

9870994f5cf18c0bfab421a96d171478407bdc8f57a4555633937be57c53efc1.exe.zip
.zip

Password: infected
9870994f5cf18c0bfab421a96d171478407bdc8f57a4555633937be57c53efc1.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ