a341aa32d30b89f6907c24884ea6d10f31d6038e62167184647f998e82de148a[.]exe[.]zip

General

Target

a341aa32d30b89f6907c24884ea6d10f31d6038e62167184647f998e82de148a.exe.zip
Size

48.4MB
MD5

21cb0a99410210b2ec6e89ff9d6d6c83
SHA1

d12fc6b2b760cf280efaa865b4bad9eb36524321
SHA256

15efc2c79d40fe3e7dbbb262afa3d364fd570de562572591edc106f255345dfe
SHA512

19b3811879ff2bb2f8251cde5b5d2da419fba0b0fab224a23455f467faa99645bd628871089d1d2998aee723c6953e1c9dd5b7c39d93d9e2bde66101c14edb0c
SSDEEP

1572864:GFJoxuj7lSgr22L++ForJiIilwI6wYBnn0GsVkBPjpBS:GFJoxGlPS+FqiIiiFwc0bkBa

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a341aa32d30b89f6907c24884ea6d10f31d6038e62167184647f998e82de148a.exe

a341aa32d30b89f6907c24884ea6d10f31d6038e62167184647f998e82de148a.exe.zip
.zip

Password: infected
a341aa32d30b89f6907c24884ea6d10f31d6038e62167184647f998e82de148a.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 49.0MB - Virtual size: 49.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ