ac8753ced58a7ac1ee13dc6de9f1007cdc10e9be93e398f4fa64689f2ff22ae7[.]zip

General

Target

ac8753ced58a7ac1ee13dc6de9f1007cdc10e9be93e398f4fa64689f2ff22ae7.zip
Size

651KB
MD5

e27ea87ead328fba249fc08ce03ebc53
SHA1

259aa33d24e264af3aff61d9509eb87ba3327ea9
SHA256

4774655458b63402c70a95b9c301635cffcb9a083ab3d1a4cc25689e27ae302a
SHA512

95a2e085b9152e820217978382d0ce7b77e4b29352187865cd8a8b2e1c13bff488af2a341d70395244885525213e6d62fd0ea3b75ec7c8ed48605c225ea60b71
SSDEEP

12288:1p2JxgCl8GlQiAzL3HA5SNy5G0PO37ZlSs04rK5Cm3NDVH15m9EZ8OG2B:18J7lP2fwsNyY0POrZlz0bndpO9EZGC

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ac8753ced58a7ac1ee13dc6de9f1007cdc10e9be93e398f4fa64689f2ff22ae7.exe

ac8753ced58a7ac1ee13dc6de9f1007cdc10e9be93e398f4fa64689f2ff22ae7.zip
.zip

Password: infected
ac8753ced58a7ac1ee13dc6de9f1007cdc10e9be93e398f4fa64689f2ff22ae7.exe
.exe windows:4 windows x64 arch:x64

Password: infected

b3295e259e3c7d46d0d35596d3de7e27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

PathMakeUniqueName

mscoree

_CorExeMain

advapi32

RegCloseKey

user32

CopyRect

kernel32

GetModuleHandleA

Sections

Size: - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 844KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE