f6630731b845e349d4df374947a48f32dbf26847a5818fb082ec52655386781d[.]exe[.]zip

General

Target

f6630731b845e349d4df374947a48f32dbf26847a5818fb082ec52655386781d.exe.zip
Size

3.0MB
MD5

9f59ad286566bbdff978c14f0a9c7f0b
SHA1

5a034b668407c137601c8f5ff995c5fa57a0faa4
SHA256

085f8ebd2501c8353b87dcdb9402a902a9e60fc328060b8ed82a683d616bc53f
SHA512

93b69bda833e47cd700f7adc8d4f3dd5ec017b9eb6e779b818659254149d34eb6e3492f8fd7beefca846c7ebaec6acf5b297f9f1352bb7b61b114e2321e1bad7
SSDEEP

49152:3xwPguegj6DQ4sl1bmQNoReSB73a5tGVVUiSnS/9QhDf4I:6/jeiFmQNo3a5yUiV/2

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f6630731b845e349d4df374947a48f32dbf26847a5818fb082ec52655386781d.exe

f6630731b845e349d4df374947a48f32dbf26847a5818fb082ec52655386781d.exe.zip
.zip

Password: infected
f6630731b845e349d4df374947a48f32dbf26847a5818fb082ec52655386781d.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ