5fb2f4ae636a6042d5b50ebdace21d7a6910f172c6a7a2e2001aaae3e8f324aa[.]exe[.]zip

General

Target

5fb2f4ae636a6042d5b50ebdace21d7a6910f172c6a7a2e2001aaae3e8f324aa.exe.zip
Size

12.0MB
MD5

3a54468c26f0492205cb3f9eacd9046b
SHA1

3e79b199e30cb772e11e7fdc7b76c6fd62f2aef8
SHA256

ff3c379f4748f701abc010c5eb518596d7faf10d4cc4e4641e05eb6d5c739651
SHA512

912dc2459d3be219337ae734b6c8457d2603481cc6228b4a82141326d636afb9df70ed8b4cd44fb18b729482614480f7c1e614e522ace6c99c06e72068599171
SSDEEP

393216:OXmYjjKm8L22ZTTXJJ5RB/oHLRI0EN+cuH1:OXHD8L/HZv/oHVEN+TV

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5fb2f4ae636a6042d5b50ebdace21d7a6910f172c6a7a2e2001aaae3e8f324aa.exe

5fb2f4ae636a6042d5b50ebdace21d7a6910f172c6a7a2e2001aaae3e8f324aa.exe.zip
.zip

Password: infected
5fb2f4ae636a6042d5b50ebdace21d7a6910f172c6a7a2e2001aaae3e8f324aa.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.4MB - Virtual size: 12.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ