28d1d2756f3878d611f56712d9980c450a20a4f7ff7af355c0ad727d7e72aa73[.]zip

General

Target

28d1d2756f3878d611f56712d9980c450a20a4f7ff7af355c0ad727d7e72aa73.zip
Size

335KB
MD5

85f74f8485b91cfcf1281f5265291081
SHA1

45c9328978b61c80a0bd9cc983b7b3f2a54f503c
SHA256

34e7113e05c8567050563761f0bc7164b109ad8ee4f4351580f4f38d8499211b
SHA512

27f8fd713b86493dcb3a2cf70d3fc9faf487147f2a33b9e2132d70e4b4fddb17e2fd30280fd0d835f785d4420cbf5e04877ffbd07e0f667d1e0d491636047dbe
SSDEEP

6144:hE+xuSPOKN7En2K/82cv2hTWZMgxPFR3BOHTgYrmErzwGf:hJMIrE//NDgzpYUy3x

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/28d1d2756f3878d611f56712d9980c450a20a4f7ff7af355c0ad727d7e72aa73

28d1d2756f3878d611f56712d9980c450a20a4f7ff7af355c0ad727d7e72aa73.zip
.zip

Password: infected
28d1d2756f3878d611f56712d9980c450a20a4f7ff7af355c0ad727d7e72aa73
.exe windows:1 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 614KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ