f38e76a9f003a5334f17a4364b52ad85381c19bad26dcef4e0f3ab136531fcc8[.]exe[.]zip

General

Target

f38e76a9f003a5334f17a4364b52ad85381c19bad26dcef4e0f3ab136531fcc8.exe.zip
Size

4.1MB
MD5

fc9316c6065a68b2dcf648f5cc5e98a2
SHA1

ae9c045051e464020bb0fa3ffcdad87b7fb27507
SHA256

1865528acc7f080b55ee284f2a30dffb10cfddc0f3517e9570bca7b1851ccc28
SHA512

3faf4daa8f5de2643dd2ca6fb35e13ff5aa0ba9eb81aa9f7bb999a2008e6f230ecb1bb26f6305754c0a69b595a3b56f295f947cae6923013ec1502e09c35d8bc
SSDEEP

98304:JrT2HIZ2zZbsTeSKGwD6+98+x7BD9Wm02pwtfXBVcJbqWQVJZdJ/:hyHIyZg7wD6+Pr9bAfX+bqnTZdF

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f38e76a9f003a5334f17a4364b52ad85381c19bad26dcef4e0f3ab136531fcc8.exe

f38e76a9f003a5334f17a4364b52ad85381c19bad26dcef4e0f3ab136531fcc8.exe.zip
.zip

Password: infected
f38e76a9f003a5334f17a4364b52ad85381c19bad26dcef4e0f3ab136531fcc8.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 138.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dlib
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE