594b0e885c73b98ff4bd9a9692cc413b0452ee38875ab04efb34bd98e51ec71a[.]zip

General

Target

594b0e885c73b98ff4bd9a9692cc413b0452ee38875ab04efb34bd98e51ec71a.zip
Size

262KB
MD5

3f539966ef0583e2c7a049a8db8cfed0
SHA1

74ba7ed25b09ebe54943fb22a35a5c11802e1549
SHA256

3d11fbb2d51ddbd44147b7b5997836ad4031d44aa802a1a38d64c67eea80b709
SHA512

3038097556c8d43d1a86b90e3ca883d1e6e5649b433cd70a3347cf23401f2d04b3ae424be082ce3ae7fd47cebef5221021d835be48d07dc89d6f09f50369d40d
SSDEEP

6144:2xmlqxBaesETsNpfA7/CvUuQORpGL+qB2gdWen:24loBlsETsNpY7qMSGaGV

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/594b0e885c73b98ff4bd9a9692cc413b0452ee38875ab04efb34bd98e51ec71a.bin

594b0e885c73b98ff4bd9a9692cc413b0452ee38875ab04efb34bd98e51ec71a.zip
.zip

Password: infected
594b0e885c73b98ff4bd9a9692cc413b0452ee38875ab04efb34bd98e51ec71a.bin
.exe windows:4 windows x64

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 467KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ