6ee3240e69f9f078386e729d2f2bc6613a062ca07b157e23e4ebc696f4cf7d2d[.]zip

General

Target

6ee3240e69f9f078386e729d2f2bc6613a062ca07b157e23e4ebc696f4cf7d2d.zip
Size

132KB
MD5

f195a910aec9b8399496681dd8fdafbd
SHA1

2f2f8ef167435f7cf020df951db6edb396632f4f
SHA256

b2edf8afb03f2bd4835a6d84e81ec48b07732408965ef658915deea74163172d
SHA512

307e7f2d6a5278b9090b0941064a6978ce69bb56211e3a9b30b02f45a1f30c2428a48917dffe616e4f11b86b523a91078b1f338e5cf3f1ba439d8fcf283e0a40
SSDEEP

3072:CnLzvQs/IxLIq7Hl8I7gLVnz4aXTFrb1903D9b:GLt/qLIqblNYnXBr3yD9b

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6ee3240e69f9f078386e729d2f2bc6613a062ca07b157e23e4ebc696f4cf7d2d.exe

6ee3240e69f9f078386e729d2f2bc6613a062ca07b157e23e4ebc696f4cf7d2d.zip
.zip

Password: infected
6ee3240e69f9f078386e729d2f2bc6613a062ca07b157e23e4ebc696f4cf7d2d.exe
.exe windows:5 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 224KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE