1d0f6d050e37069bd2a629447f1c131e441ca68fa3eab78226ca557d62f3a76f[.]exe[.]zip

General

Target

1d0f6d050e37069bd2a629447f1c131e441ca68fa3eab78226ca557d62f3a76f.exe.zip
Size

1.9MB
MD5

0f598c7be97d7e0c0ecdc6676f265595
SHA1

4b91638c7ee8f4138bed4daf5a6e631de73839ff
SHA256

1b33ae218367afb3881d065733ac308dc694b2fe9c157946ab30b187e56a96fa
SHA512

f87369883d40029b949a687c3a35815ccd17e810a298df95ad20d0cbee0b971dff017a5e75a815882a3407f2f674c4690a7a63e1fb310669cca53119594a1646
SSDEEP

49152:DuBzEwmDKZz4wT98aioWICBMGPJp2s2qD2RGyi7a:DqzlmWJ428ai9HuGxpLHoW7a

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1d0f6d050e37069bd2a629447f1c131e441ca68fa3eab78226ca557d62f3a76f.exe

1d0f6d050e37069bd2a629447f1c131e441ca68fa3eab78226ca557d62f3a76f.exe.zip
.zip

Password: infected
1d0f6d050e37069bd2a629447f1c131e441ca68fa3eab78226ca557d62f3a76f.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ