f078a97ea1930e7e0dae2c672f0cc9e72c56b811f3198c7311949c1463a93a45[.]exe[.]zip

General

Target

f078a97ea1930e7e0dae2c672f0cc9e72c56b811f3198c7311949c1463a93a45.exe.zip
Size

2.4MB
MD5

53070d474f5d6f399ad825f13f2659c4
SHA1

e2a161f310097a62d09085bebb604488debafc98
SHA256

60d8bf0b7a6d929dd20c987e4fc922c58828c0f3436217b373087b215fef9bd9
SHA512

2f990747ee18d55590939d2ed91e66b867b93ce4f57a6ce7729b3f7c592ea38ebb840b03d41a8417809f27a10a6cc4a3250e308b4dd33b8ffebeab181149d27c
SSDEEP

49152:ATmzOqMhy45WiGfKFd0Mxgvh4rlO3Lx1sEN+tJTmTAD9:AKzOqMhXWcXGurlO3Lbsrtpms9

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f078a97ea1930e7e0dae2c672f0cc9e72c56b811f3198c7311949c1463a93a45.exe

f078a97ea1930e7e0dae2c672f0cc9e72c56b811f3198c7311949c1463a93a45.exe.zip
.zip

Password: infected
f078a97ea1930e7e0dae2c672f0cc9e72c56b811f3198c7311949c1463a93a45.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ