4094dca5e6fdab579f3e7b8d37ca40c3e6cb7293b5272b329107c08943d23d06[.]exe[.]zip

General

Target

4094dca5e6fdab579f3e7b8d37ca40c3e6cb7293b5272b329107c08943d23d06.exe.zip
Size

30.6MB
MD5

7a51bcfc90c77eb93de0b3683bc7258c
SHA1

e0d5d8773360045e143b3e2cc27b1cbf0ee01f3e
SHA256

09ec84dc75612ae1a9ecb563d2c84019e676718463d8940a4e0e0f5137c3b6d2
SHA512

790040e3b88a25d18d68cbe0c1c3ba9bf9fe7a642713449ffbe2658b8fa919cc6593705d939788a60938a480c488e6382634f5e39678e8f8a893ee0a071e4fb5
SSDEEP

786432:0qyYuYxv+y/tSApAhFtnS3vK86rzeOA7ayPpAAIMi5BI1+9aiQGqn:XuASbtS3oxA7HT/1+9aiQtn

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4094dca5e6fdab579f3e7b8d37ca40c3e6cb7293b5272b329107c08943d23d06.exe

4094dca5e6fdab579f3e7b8d37ca40c3e6cb7293b5272b329107c08943d23d06.exe.zip
.zip

Password: infected
4094dca5e6fdab579f3e7b8d37ca40c3e6cb7293b5272b329107c08943d23d06.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31.1MB - Virtual size: 31.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ