a1862b102bcb996c43ce1125ee3c6ef98b5d02a0cee9f3b6052698e6a99a27bf[.]zip

General

Target

a1862b102bcb996c43ce1125ee3c6ef98b5d02a0cee9f3b6052698e6a99a27bf.zip
Size

615KB
MD5

e2403c88e9c2e03aff52218515659ea5
SHA1

c29298a3de80e1d454cebce87e4a0bf0d4d92694
SHA256

889c088a381b0307f868de1d1cf0f11ac801c7abfeb6b559d3c6bd4fe6d8722b
SHA512

24da3d72fad23c3dd21a4af323fccd293a103987535a9706eaff8d5c20bafa7e54f84c7348fd3da015887f46236629a3e32da4553792cbc5f6d6201973359c33
SSDEEP

12288:kg5rzuqHDh3CTo5fbm5RYCDtbEIjzVsV7K7q7OXeuOGb3/vK+pRcn7EDUQGW:korJ9fb69DtbvjKVEQGr/SMRI7EDl7

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a1862b102bcb996c43ce1125ee3c6ef98b5d02a0cee9f3b6052698e6a99a27bf.exe

a1862b102bcb996c43ce1125ee3c6ef98b5d02a0cee9f3b6052698e6a99a27bf.zip
.zip

Password: infected
a1862b102bcb996c43ce1125ee3c6ef98b5d02a0cee9f3b6052698e6a99a27bf.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 645KB - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ