5ee838353aea08eb6ff67e2e7ef41eabdea8939b773077bf28e44d1ba50181e4[.]exe[.]zip

General

Target

5ee838353aea08eb6ff67e2e7ef41eabdea8939b773077bf28e44d1ba50181e4.exe.zip
Size

1.0MB
MD5

2270e1b12495bf96043119feb8ec7a0d
SHA1

092e13781fd10aac92e5b50f3fecdca212633c31
SHA256

341d682cbe4ce798e132341f0a6c2887a45a82dac4b6d25e2545e5163b18711f
SHA512

18f0897bd9c0d868f2f0ad51330a23c59f0ad2687fff3c463cc04b41ecdbb6701b0d6fc534f6ec778c3f789023bd3584089aa6335bbc2a7b0a637f439b79a02c
SSDEEP

24576:TnWd0CPm7UVz388EDhWpqxQG/gSSaUPcTS22H222Dj+oIF:TnWd0X7oz388EDhWpqxQWVSdsOt2GoO

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5ee838353aea08eb6ff67e2e7ef41eabdea8939b773077bf28e44d1ba50181e4.exe

5ee838353aea08eb6ff67e2e7ef41eabdea8939b773077bf28e44d1ba50181e4.exe.zip
.zip

Password: infected
5ee838353aea08eb6ff67e2e7ef41eabdea8939b773077bf28e44d1ba50181e4.exe
.exe .pdf windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ