MDE_File_Sample_5b8ca7a3fb440e873762282737f2afe15ec6fa4b[.]zip

General

Target

MDE_File_Sample_5b8ca7a3fb440e873762282737f2afe15ec6fa4b.zip
Size

74KB
MD5

fc4aacc7f7b70486947c3fa3e65c3127
SHA1

0e2469553eb123df05e9bcfbf158e14bb465f53c
SHA256

8150b2c446b4012b3c3ab0e2d6db5075c64d442eb89f35cdd86b693be9dbcdf4
SHA512

5474fc73a1a3824d044e31fe54e255be5d449b0b0c821aec62fdba511c2f24a368207e0ba09376edf7864d641ba32412425b82f256d95e8a92377ff790aae58e
SSDEEP

1536:4r0yq7ciYgoifBecgozJw0gEC+wWav/uhm9ZDQA0eOa:4IhhbzfoctVw0tLpavG84eOa

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LinerecorderAgent.exe

MDE_File_Sample_5b8ca7a3fb440e873762282737f2afe15ec6fa4b.zip
.zip

Password: infected
LinerecorderAgent.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ