6ee3240e69f9f078386e729d2f2bc6613a062ca07b157e23e4ebc696f4cf7d2d[.]zip

General

Target

6ee3240e69f9f078386e729d2f2bc6613a062ca07b157e23e4ebc696f4cf7d2d.zip
Size

132KB
MD5

25d0705c321dbcf3b521bff653ef28e8
SHA1

58635cdbfe6bbe3caf409ca302c4a78218caacde
SHA256

283d159e84fba14d81adc3fa2a1031189af8cd75680e729fedd59bfcac805472
SHA512

ac529c33edd4bd51a2c0125d12fa887f05924bc8a06056d7d58b11a81899b74af8c73c94f8b936a1c2dbcbe9a97866896e4f53c2e8b58521268507bd302f2173
SSDEEP

3072:qRLTGX3xttHGeWaknVNN83eiMXwuHqLwMIcawxR22V3AAeXJpStTTZ:8E3xtwP3nVnaUqLrvR22VwjCZ

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6ee3240e69f9f078386e729d2f2bc6613a062ca07b157e23e4ebc696f4cf7d2d.exe

6ee3240e69f9f078386e729d2f2bc6613a062ca07b157e23e4ebc696f4cf7d2d.zip
.zip

Password: infected
6ee3240e69f9f078386e729d2f2bc6613a062ca07b157e23e4ebc696f4cf7d2d.exe
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 224KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE