6c1498578368c14eba0cd43010b106a3f12dcc814b1913d04dcb4889154334ed[.]zip[.]zip

General

Target

6c1498578368c14eba0cd43010b106a3f12dcc814b1913d04dcb4889154334ed.zip.zip
Size

1.5MB
MD5

b96d8514d5a6eee8e301fe35c7062eb1
SHA1

b07455e40bb185c28cc33df395b3c94de013f53a
SHA256

62ff97f76e5fd74d159d9218b7839e070ea288a293cb1ce598f82a24e5d4c45d
SHA512

aad548b2bc61ec143adb36cffbec4d0f316043bf297da9657e6a0450238f96efbb83c1b446ca35c6418ff258899d6373cd34bf7a0b766b8b997937f113fdfd80
SSDEEP

49152:t/3J4z8+FIGMsRK0QRxSHdJqj5naA9Z632PUpZDpXL7:t/qhMgQR4KnboEKDpn

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/MachineSetup.exe

6c1498578368c14eba0cd43010b106a3f12dcc814b1913d04dcb4889154334ed.zip.zip
.zip

Password: infected
6c1498578368c14eba0cd43010b106a3f12dcc814b1913d04dcb4889154334ed.zip
.zip
MachineSetup.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ