7370040dff07eda878dcb326d9f765d5908fa248ef3cf5d6742658d6220f34b3[.]zip[.]zip

General

Target

7370040dff07eda878dcb326d9f765d5908fa248ef3cf5d6742658d6220f34b3.zip.zip
Size

145KB
MD5

7246dd6450b43e9695994a87d5c6b6fc
SHA1

fde8d3ebfc912c5381a727da7b53046ace17f51a
SHA256

2bef5023f8a384b7483f4018b0524101345a7450eb21bcf02b47ba92a6e08906
SHA512

848c20ab1482a463cd8cad1ef48e1a9b03f437ebcb7f8d13c8471f8551ca19bde592cfb09e6c6ea2ce9ee3f930fb3e3137c3d8c8737560b54143a4f4c423a2a2
SSDEEP

3072:jlyHYRnm60Ms0dp57Q6zzdJl6s0uYoxE1fZ7Bi6KQQ4Cy8s7:xCSm640986zzdb6swVfxBi6NTZP

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Rocketsoft - Translation Checker/Rocketsoft - Translation Checker.exe

7370040dff07eda878dcb326d9f765d5908fa248ef3cf5d6742658d6220f34b3.zip.zip
.zip

Password: infected
7370040dff07eda878dcb326d9f765d5908fa248ef3cf5d6742658d6220f34b3.zip
.zip
Rocketsoft - Translation Checker/Rocketsoft - Translation Checker.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Rocketsoft - Translation Checker/Rocketsoft - Translation Checker.pdb