f12ad493e8ff6a12268d600060d0226e8cde301514822022a56e2599bf6e3dda[.]exe[.]zip

General

Target

f12ad493e8ff6a12268d600060d0226e8cde301514822022a56e2599bf6e3dda.exe.zip
Size

1.2MB
MD5

706cceb2a6fe4dd1836a53f2017407f6
SHA1

4d8f7bf5b09197553d3aa1974468a5d4151cfb17
SHA256

8565ad38540c5cd060e32117f10129cc49893be8b929ad41b1f2d26de43cf655
SHA512

d375b1350a1b1959bfae6ce377d060ab4d84d0b60ecdd32a96bf3a869c5fa3026f42050e21c37a741420a450ddce5bab963b8e8c7fa1461a92b40a77d4cd725e
SSDEEP

24576:T0Sn1WlwrcM4FK7DmHXwoxLyOs5hsNat0KqyylpbUnqPcgqUMn3PGbi:140YsuwvHsNU0vl+Nh/Gbi

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f12ad493e8ff6a12268d600060d0226e8cde301514822022a56e2599bf6e3dda.exe

f12ad493e8ff6a12268d600060d0226e8cde301514822022a56e2599bf6e3dda.exe.zip
.zip

Password: infected
f12ad493e8ff6a12268d600060d0226e8cde301514822022a56e2599bf6e3dda.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ