c03d29179ca4da7baceb3672630102aa5df889e2335a186386b01aa56b39b3ee[.]zip

General

Target

c03d29179ca4da7baceb3672630102aa5df889e2335a186386b01aa56b39b3ee.zip
Size

388KB
MD5

0f89ce46c4ed44e69281d843f7b880c9
SHA1

d5a51fd7fd9bc543a8b31e11d8cebb6ccbfb342a
SHA256

e6fe4c32ca722eaca37b1c955046ac8e5a708690d640154e2411c38d6f097059
SHA512

d6723942b8d846fce4c987299277a5b6bc1aaaf44239e289d0bac12fea04021eea17f7de585d933137e191a67ee70620358e13773f7c20f7d650aa422abf350b
SSDEEP

12288:ko/zo+FhVwyO+5oWS9pUIt6JVkIxKUBuAhN:1/zo+Va+A8It6AsZuU

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c03d29179ca4da7baceb3672630102aa5df889e2335a186386b01aa56b39b3ee

c03d29179ca4da7baceb3672630102aa5df889e2335a186386b01aa56b39b3ee.zip
.zip

Password: infected
c03d29179ca4da7baceb3672630102aa5df889e2335a186386b01aa56b39b3ee
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.poi
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ