33a76f53cc8400dad81185273d346790d7980862740c00713b4d1f9c5f2822fc[.]exe[.]zip

General

Target

33a76f53cc8400dad81185273d346790d7980862740c00713b4d1f9c5f2822fc.exe.zip
Size

1KB
MD5

9ea6a0a753c1c697047a1c57a8c0dfac
SHA1

4cf7407927759e518108eeb26cd5253ace5cd565
SHA256

afd8e90a09cb327656e6f43bb8f9573b5a27c91fd5f9c3c3db9ee18cecd00d07
SHA512

eb0ae345446098ab15c5d558802ad5dfd201dd07aaf6ef5beb9e4096eb49fe6beb7241f7441bbdb87145fbeafb760593b4bc23496c4876311e855fa49474698c

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/33a76f53cc8400dad81185273d346790d7980862740c00713b4d1f9c5f2822fc.exe

33a76f53cc8400dad81185273d346790d7980862740c00713b4d1f9c5f2822fc.exe.zip
.zip

Password: infected
33a76f53cc8400dad81185273d346790d7980862740c00713b4d1f9c5f2822fc.exe
.exe windows:4 windows x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eyhj
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE