34b3b452f21eef5d1fabec7b147a4ace8e2f4ac95886d07b6ef0ff837cd1704c[.]exe[.]zip

General

Target

34b3b452f21eef5d1fabec7b147a4ace8e2f4ac95886d07b6ef0ff837cd1704c.exe.zip
Size

6KB
MD5

2b1d611176becf98df6d6d1d302214fe
SHA1

5ec2b4b4f2281487007fb8b15b81eb1c05d05098
SHA256

c2c37605703c72cfcfad836bc9c45a76b36fbf9116a3957bf2406ae95dfda9fd
SHA512

923347f0d2287b62479578c799b6d8c6bb5061b5a29c57f15258419b757b7bd13ac139c2eebda48ec131171610e97f1360af6d4197b1de6956f6ffb836f1eb99
SSDEEP

192:pSA2TazmfGxHEWgFKW0+4WtzbDJh1vLqLXGAoOvZytt:pZzdHVgFXzb1h1VAhvQr

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/34b3b452f21eef5d1fabec7b147a4ace8e2f4ac95886d07b6ef0ff837cd1704c.exe

34b3b452f21eef5d1fabec7b147a4ace8e2f4ac95886d07b6ef0ff837cd1704c.exe.zip
.zip

Password: infected
34b3b452f21eef5d1fabec7b147a4ace8e2f4ac95886d07b6ef0ff837cd1704c.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ