4e68cf6aff71e4731fdce696d3faba765a1d62ccac652f65db1658ead8a20836[.]exe[.]zip

General

Target

4e68cf6aff71e4731fdce696d3faba765a1d62ccac652f65db1658ead8a20836.exe.zip
Size

1.8MB
MD5

6c0f3d0fc7e066530ba0842f3d3b80a2
SHA1

bf1b37352bcc3b308a0576f71cbe46c2426b501f
SHA256

631bc17ea726afb9aab2c1748c715fd7da9e63a0dd1f1926375ac4f7521b7058
SHA512

6bdc3692b3e4e9e14988a168ff8369cbd7b9dbb988847f3ce83ae74c653805af33b6f6ea01bc5ec813b71ad0673c47428d54015131be311e7b7a0fa449de0c1c
SSDEEP

49152:eLHJa3Mg2WOFAHmB/5pFBqaGfWTYRxWe+wnfRExcAfOKpK6SvpWx:eLM3XDOFUm95pXEcw3+4f+WWHpKVI

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4e68cf6aff71e4731fdce696d3faba765a1d62ccac652f65db1658ead8a20836.exe

4e68cf6aff71e4731fdce696d3faba765a1d62ccac652f65db1658ead8a20836.exe.zip
.zip

Password: infected
4e68cf6aff71e4731fdce696d3faba765a1d62ccac652f65db1658ead8a20836.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ