cfa5012b5659a54ec59bbfe06a43183fa8a349c1507d9e2479bf27a99b6c02cd[.]exe[.]zip

General

Target

cfa5012b5659a54ec59bbfe06a43183fa8a349c1507d9e2479bf27a99b6c02cd.exe.zip
Size

28.1MB
MD5

42495b48d8f71d7e65e6447ce1c11738
SHA1

a11fefa82c370efcfa0f63adb7ed531f49265539
SHA256

e9cd755b6a802d2b7f604d14cd427459151df97613d5673ee368b96a42abfa0c
SHA512

f6511bfef0d712bd5baa815f8af655c45b8cd65a45636952004fbf496854103b68ac9751b4a3c118d20ae1403de1df374517eea07c3702489ae512eca856e764
SSDEEP

786432:LE3aIa+Vp4zUM6mTbBDfzyqdSXic7h9th40WN:Lw1Vp4zUM6mTbBDbynXR7JA

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/cfa5012b5659a54ec59bbfe06a43183fa8a349c1507d9e2479bf27a99b6c02cd.exe

cfa5012b5659a54ec59bbfe06a43183fa8a349c1507d9e2479bf27a99b6c02cd.exe.zip
.zip

Password: infected
cfa5012b5659a54ec59bbfe06a43183fa8a349c1507d9e2479bf27a99b6c02cd.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29.3MB - Virtual size: 29.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ