384cc542f57b3ac91d5dcecbe38cad92e19f683266b4d44e1b81b73f458489c7[.]exe[.]zip

General

Target

384cc542f57b3ac91d5dcecbe38cad92e19f683266b4d44e1b81b73f458489c7.exe.zip
Size

362KB
MD5

25d0f0ba6cba1fa87e0218646ba6c5b0
SHA1

7df67c2486ce3a9ac478d318605ae58ec5eb9c01
SHA256

475826bda27a88c4c05fe0133fe8e8e1491c7f483f3f1a432996f7d071194974
SHA512

cb95a64284a1c34d555cb87167f09c63b7145b67c077fe8576176e9f6b959a35f76c6bf8950371a565d24322b409699cef2ad20b4d9410b22da686015725821f
SSDEEP

6144:3elAzx5c3q6vNLMfaHwQN7xziUs/Op+9OvqTJBvCyY5GQiGN+:OOA3FFLMg9iUW9uoJFq5GQF+

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/384cc542f57b3ac91d5dcecbe38cad92e19f683266b4d44e1b81b73f458489c7.exe

384cc542f57b3ac91d5dcecbe38cad92e19f683266b4d44e1b81b73f458489c7.exe.zip
.zip

Password: infected
384cc542f57b3ac91d5dcecbe38cad92e19f683266b4d44e1b81b73f458489c7.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 904KB - Virtual size: 904KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ