8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f[.]zip

General

Target

8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f.zip
Size

132KB
MD5

9945fd36a2ede1563dba2d0702210327
SHA1

027d2d6285d99fc2a20137b067f9e5e96015bbdb
SHA256

d140b63ae60844daf0f4b8512d215c6302c49ad472c35c8c5c951d8692f60baf
SHA512

2884a326d52da0141f6342d2622485d1233eca98832b94119fbd9ef88348d3f65d07e764fea50c73e3dec38b9ef21ab04d51999995a3be0d5a27785806a52944
SSDEEP

3072:5eiaeUTwbxzmDMaP4b4f26RtFcgADHXWDdEwNXB9W8C/DO+y0IUTKXcKz:4ifUwNmDHP4bUjRvnqsdEw5W8ECt0BKF

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f.exe

8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f.zip
.zip

Password: infected
8a7cc5239d412feb2e6977e47b1f3ca475fb70172ac200b81ed7700a4097564f.exe
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 224KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE