e0cbf2bd1e44bf8cb4990be80384fa04c4229c656d1a853450b3da6f49478135[.]exe[.]zip

General

Target

e0cbf2bd1e44bf8cb4990be80384fa04c4229c656d1a853450b3da6f49478135.exe.zip
Size

4.3MB
MD5

8d105eebbf21ae79a759b83856208660
SHA1

162ba0e1b0993b6eb30ec2657921083df1bb75e9
SHA256

26b399862ee90dfd944f3f7ce906d7b50fb608695067acce3b0ba50ffdac857a
SHA512

9fe13ee361cf183ed5ec68fa90d44442ef18d58fc9fe0d2e8cc6f67a042b66dcc4a7227547bf909e0840300899ad494a478187da7b82c508ecf4499aed0b6136
SSDEEP

98304:aZQwsVwdB6BlccAkJbCkdYEhqXjtzbNHfqsYJQHd8Uj6GlS4:VvVuUMDktUX19jxdjmGlB

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e0cbf2bd1e44bf8cb4990be80384fa04c4229c656d1a853450b3da6f49478135.exe

e0cbf2bd1e44bf8cb4990be80384fa04c4229c656d1a853450b3da6f49478135.exe.zip
.zip

Password: infected
e0cbf2bd1e44bf8cb4990be80384fa04c4229c656d1a853450b3da6f49478135.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ