16b589f2959af43ff7f89ca1408dcf4b5c4fc012e410bd1a2ff9e5d8c2de2f8c[.]exe[.]zip

General

Target

16b589f2959af43ff7f89ca1408dcf4b5c4fc012e410bd1a2ff9e5d8c2de2f8c.exe.zip
Size

146KB
MD5

572d8592c9f3f2c3cda43e0269a6e6bd
SHA1

9e56f606cdfe9d20e59116c417f2275e38aad8bb
SHA256

780a4842a651319b1e395b783e230a23d87652f23bd0d46f678ccea2577803f9
SHA512

89de33901db078f324688095ff1e492294c6abac2f0f6f1fd5a6894df696b3a22ce4eacc7a2ff1836fc417146bf2ab7676a285ed8ae9e241a537c4f13896df31
SSDEEP

3072:z6FalYxzD/MvT4Kg0EMRGq7wBrKC3U8EenZ4mhlleqz80zKM/Py+FWdNMzWDALm:4aYkvT4o57wgCkUn9hlYUzKM//FWduz0

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/16b589f2959af43ff7f89ca1408dcf4b5c4fc012e410bd1a2ff9e5d8c2de2f8c.exe

16b589f2959af43ff7f89ca1408dcf4b5c4fc012e410bd1a2ff9e5d8c2de2f8c.exe.zip
.zip

Password: infected
16b589f2959af43ff7f89ca1408dcf4b5c4fc012e410bd1a2ff9e5d8c2de2f8c.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 140KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE