c022999e607234fa9d3565a23052eb1a66e6b34afeb5513524c57aa870a9619d[.]exe[.]zip

General

Target

c022999e607234fa9d3565a23052eb1a66e6b34afeb5513524c57aa870a9619d.exe.zip
Size

1.8MB
MD5

1dd8bac1bf62065e730ba78de3e3f867
SHA1

4c1b9e787ddd318615b774cfc15da231297ae44f
SHA256

c4d89c5ca67006e9e20c9962e4a09cd5e202c81892a17bc39a71779c0af6d8f9
SHA512

985a382ef083e1673ddbda78587a411e6e31aad2a3ced6055b18f48db9929e6d0b7e30a33f10ef83007cc93a3026d3f3efcc564252fa57519badb9c49a7d27ba
SSDEEP

49152:9ZIludtjFuBQzg3V85MYkzo9G4XHFUrquN1XdZcZ:7Iodt4QzaASo95HueuNhrcZ

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c022999e607234fa9d3565a23052eb1a66e6b34afeb5513524c57aa870a9619d.exe

c022999e607234fa9d3565a23052eb1a66e6b34afeb5513524c57aa870a9619d.exe.zip
.zip

Password: infected
c022999e607234fa9d3565a23052eb1a66e6b34afeb5513524c57aa870a9619d.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ