086495cde3e89171613dfbc1747b2ecc9d1a810a713d3c49e432ade7bbb61158[.]zip

General

Target

086495cde3e89171613dfbc1747b2ecc9d1a810a713d3c49e432ade7bbb61158.zip
Size

619KB
MD5

ff42bb2e6ffbfb96d8cacdf701326327
SHA1

c8d85994f449fc98809197454c17302164292fda
SHA256

720a8dcef17001c659f0f8209f8dac777e847be01a17d23500a43b7b47aab6ca
SHA512

b330f9268cca85cef65d95191ffc2af1a9c2f07ed128df815042ec0485b57b47851f18667b6d0367e7a096075e851bbff06431eb7fcbc32bc930bc1e25824c19
SSDEEP

12288:sL4Fi9nh9Lwu0EsXFxtukAw/vRvd7o6E3XVaNHd685CQsRneKe6:g2i1hqH91YwXgXVVOCXR/e6

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/086495cde3e89171613dfbc1747b2ecc9d1a810a713d3c49e432ade7bbb61158.exe

086495cde3e89171613dfbc1747b2ecc9d1a810a713d3c49e432ade7bbb61158.zip
.zip

Password: infected
086495cde3e89171613dfbc1747b2ecc9d1a810a713d3c49e432ade7bbb61158.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 638KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ