6757ffba17fc6615ebb9ba02871a7f5a802408caf96fab7bf0647a1ae351f2a8[.]exe[.]zip

General

Target

6757ffba17fc6615ebb9ba02871a7f5a802408caf96fab7bf0647a1ae351f2a8.exe.zip
Size

5.5MB
MD5

1dcc21e65258388d8b7ed1cf8a031794
SHA1

17f53e1fc15983985666dc33c1916d33de492e47
SHA256

62ab26d09334c2e0b5eac9e715f19a45735df5de1a19eeb2b2f88cf45ae69cd0
SHA512

6319c2afb87bb1ff782163bbc574c82af97fc4b9fb91660150f01741524949ae9235937734767c4d4995aaef951506a533bff9a81530387d0750a09209dceca2
SSDEEP

98304:LWMpHJHJMk5F0pbAVHXQ/Icwui5p2dWbWPXH9BLt8sVOfllP/mM3n6l:asHNF0pcZSIKFdWbWP39BZ8s+ol

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6757ffba17fc6615ebb9ba02871a7f5a802408caf96fab7bf0647a1ae351f2a8.exe

6757ffba17fc6615ebb9ba02871a7f5a802408caf96fab7bf0647a1ae351f2a8.exe.zip
.zip

Password: infected
6757ffba17fc6615ebb9ba02871a7f5a802408caf96fab7bf0647a1ae351f2a8.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ