c889b672a497cf4b77a0d56ef74386e2ae5121c83bcee6304f40652595356c80[.]exe[.]zip

General

Target

c889b672a497cf4b77a0d56ef74386e2ae5121c83bcee6304f40652595356c80.exe.zip
Size

44KB
MD5

f0ab4a594341f9072315a439bbbf5dc7
SHA1

e16472368d2e48c379a64ac6c7dc67397b517f25
SHA256

3e4ff0f3be48ca5ddba9b66de53dc2db11de963100eff8e8f123abca9fa183af
SHA512

917859cbb030fd0c91f3750f7fd74d8f3edbda473480143adb83017d0bb39532dea28e2bf6d4f4d5ac48c256911c81d8b492d27a732b71589bdf55da77cae24c
SSDEEP

768:CxbZIu0Pw2vJH+DkAn1Hx4KfMWuixBbykMyV5uRHfBeve0HmUR74DN6wwyM2:x22ReDkKxrfMRubyVRMGy/7mPM2

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c889b672a497cf4b77a0d56ef74386e2ae5121c83bcee6304f40652595356c80.exe

c889b672a497cf4b77a0d56ef74386e2ae5121c83bcee6304f40652595356c80.exe.zip
.zip

Password: infected
c889b672a497cf4b77a0d56ef74386e2ae5121c83bcee6304f40652595356c80.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ