f80ece732cab111ca3fd589a16329e2ee6fb27c79306b72fee63a94d2f528f68[.]zip[.]zip

General

Target

f80ece732cab111ca3fd589a16329e2ee6fb27c79306b72fee63a94d2f528f68.zip.zip
Size

33KB
MD5

554065d35534e807d00da7f89ff98b98
SHA1

2e4c9fdc9a8966a8e992de1f87b689d3f80c000f
SHA256

af78ae52f9428fa9c95b2716ba901ec6850a4b4d47518231ad2835b9bdf0c23b
SHA512

18d059ff8c729c9fab33c90c91d46ea5689daf319bf33457cf95e087aec9aca37a5469608d5786f576a2ad43e1bd4bbe243207bfcb7588c92570038363bd2dbb
SSDEEP

768:If3Faq6mW3ra67kpRihCvubhizZSkv8NhG0/5kUiWjd/:QtFb67OPubMzZS5WvMd/

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/֤ѯ.exe

f80ece732cab111ca3fd589a16329e2ee6fb27c79306b72fee63a94d2f528f68.zip.zip
.zip

Password: infected
f80ece732cab111ca3fd589a16329e2ee6fb27c79306b72fee63a94d2f528f68.zip
.zip
֤ѯ.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE