0bcc84f4993028a6d4f2e7139ac390dd78743831869cb0fb2d6e5e87e629daf0[.]exe[.]zip

General

Target

0bcc84f4993028a6d4f2e7139ac390dd78743831869cb0fb2d6e5e87e629daf0.exe.zip
Size

880KB
MD5

335368fe98ee523758c6f2ab98f35447
SHA1

6f3b7e9265f2761bcefc9d6523d23531de98121f
SHA256

39bc2469583c2eb320c8668f4becc9501386f0c774d5c900ffd811c973ff3d28
SHA512

9269b5df89acf90bb1d5cf6b667dad84a38aec069124900887a9e78a66153e2769e4bbf8ef8371390b37dd4ec92feb71f84e766e313032cb78198ad8abe84d9e
SSDEEP

24576:C/Ach+UE494v4SxFWjE43GT/yGdRztz4UIM92clj:C/Ach+meFWo4q/yARztzua

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/0bcc84f4993028a6d4f2e7139ac390dd78743831869cb0fb2d6e5e87e629daf0.exe

0bcc84f4993028a6d4f2e7139ac390dd78743831869cb0fb2d6e5e87e629daf0.exe.zip
.zip

Password: infected
0bcc84f4993028a6d4f2e7139ac390dd78743831869cb0fb2d6e5e87e629daf0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ