540ce7fd35685050b0f8a3518bb61826437cabde79ed42a8a6c6642989478f2c[.]exe[.]zip

General

Target

540ce7fd35685050b0f8a3518bb61826437cabde79ed42a8a6c6642989478f2c.exe.zip
Size

48.7MB
MD5

abe474b604aefb264fb76d012a000ad0
SHA1

ac8e9810120a61e2ce2627f7676bca29fc701be1
SHA256

9aa5bedf6ab13df212585333435c3aeaccee42d0731a3a936fe35f723abbee21
SHA512

ea08cca561d743595d6fe4ba8b53c45ec812af423afe814fdaebbd5e5528722a31d07050be2ae7005d6ea1958206292eafca64188169202910daca8d89d3a681
SSDEEP

786432:C4X8zn+fydgCslp/2MhtUrrY7zNv3QaAYvxZtlVnE27q3Kp/HjdfM3Yy28mM34Uk:DMz+1tlwEhAYpb9qaRy3R28mq1Z9OscX

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/540ce7fd35685050b0f8a3518bb61826437cabde79ed42a8a6c6642989478f2c.exe

540ce7fd35685050b0f8a3518bb61826437cabde79ed42a8a6c6642989478f2c.exe.zip
.zip

Password: infected
540ce7fd35685050b0f8a3518bb61826437cabde79ed42a8a6c6642989478f2c.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 49.2MB - Virtual size: 49.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ