aeb821c17bcdfbc11ca529de724c4613766e773421025e5f3aba8454c746817a[.]exe[.]zip

General

Target

aeb821c17bcdfbc11ca529de724c4613766e773421025e5f3aba8454c746817a.exe.zip
Size

424KB
MD5

5a90b4df6de9b0084555579b31b3660e
SHA1

632a31efa0f163e3d350767465965c7c8c8aaddf
SHA256

cffb9f88ef216ce592be5ca4eb988bff2f3ebd3106c35fc039def524850d072e
SHA512

6d5dda49c6a16a2cee2a9db73431f02bd2247b74778bce0558af1ad08a53ac397f7421d1af09a292f82baf4f37e1c37ceb34593fca2cc681255c93c5539eb21b
SSDEEP

6144:Pv1nfIAiLMn8riXN3+dD9BGOBzO3PGjrIVbHRdWiMdYSibkU4O40TlMUcV+DKLeE:PNQftiI5zprIFxQL7ieO9DceKZ

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/aeb821c17bcdfbc11ca529de724c4613766e773421025e5f3aba8454c746817a.exe

aeb821c17bcdfbc11ca529de724c4613766e773421025e5f3aba8454c746817a.exe.zip
.zip

Password: infected
aeb821c17bcdfbc11ca529de724c4613766e773421025e5f3aba8454c746817a.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 577KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ