9e6a0893bb927f1ad8490ede855a8d51278594ff4f5a9d9d7b40e5706fe3ca91[.]exe[.]zip

General

Target

9e6a0893bb927f1ad8490ede855a8d51278594ff4f5a9d9d7b40e5706fe3ca91.exe.zip
Size

409KB
MD5

64a6d18cf3058ab9eac72a7201056ce9
SHA1

df357cd9b01ba6661d3485c2d9a5437c79693129
SHA256

852598b3c7f3dcf9c9071284912056954860a8dbc50540a0afc8d25895a6f449
SHA512

f1b1889e9fc32815228a3636328918ce909ddbd29b760e16bf374adef11607b03e4380f364f4ad02fbad2976c0971c4d7c9ef60a24cb97b5dad8ddf89c3f8467
SSDEEP

12288:ulH/6Fs0fAWAP7PHyVEdxqm6A4oltUCzGCWq68Xaa:AH/6FZQfySsoVqcp

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9e6a0893bb927f1ad8490ede855a8d51278594ff4f5a9d9d7b40e5706fe3ca91.exe

9e6a0893bb927f1ad8490ede855a8d51278594ff4f5a9d9d7b40e5706fe3ca91.exe.zip
.zip

Password: infected
9e6a0893bb927f1ad8490ede855a8d51278594ff4f5a9d9d7b40e5706fe3ca91.exe
.exe windows:5 windows x86

dc73a9bd8de0fd640549c85ac4089b87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ