df211294bc5bc8103af5a28a1c76f5da3d1492dcbe14af7410a28931b00a5c3f[.]exe[.]zip

General

Target

df211294bc5bc8103af5a28a1c76f5da3d1492dcbe14af7410a28931b00a5c3f.exe.zip
Size

1.5MB
MD5

d0f8ffd50731f882c0fc75a75996f0e5
SHA1

d21bfe7c3bd25d6d690d8371f8389b29f47ea446
SHA256

e49a25b08a96f6d125746afb4680b384f9f89ed34daefbc7fb890fa951aba59d
SHA512

5be62d31dbbcd1e2e309e94f7feaf9faec6b11ff4946549348133967df5ee111717ded6ee800e11064558e6dbb646a39a3cec07be5588eab88bd47cc604637da
SSDEEP

24576:DQs0k+4h2VpREI3EoyKqkTbKOGwu6G5UlXXWqzvVru5ZoRo/AuRVnqb5qZgEAOyx:DQsF+4heLERZLwu6G5aXmqVOZkodRVq/

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/df211294bc5bc8103af5a28a1c76f5da3d1492dcbe14af7410a28931b00a5c3f.exe

df211294bc5bc8103af5a28a1c76f5da3d1492dcbe14af7410a28931b00a5c3f.exe.zip
.zip

Password: infected
df211294bc5bc8103af5a28a1c76f5da3d1492dcbe14af7410a28931b00a5c3f.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ