b065b3c16ac792734b83462358caf8a9786788dc32ba27677ce695c9c91e3564[.]exe[.]zip

General

Target

b065b3c16ac792734b83462358caf8a9786788dc32ba27677ce695c9c91e3564.exe.zip
Size

61KB
MD5

ad8a988d2d4d99c5630146c1af75b719
SHA1

32f32ed26b853d3c0810f26a663c181cc9d71090
SHA256

3fc5b3b1593910f85731f68e17af50ae5d6d2161ddae23d937fa19d398f84f52
SHA512

b4df980d18bf08ea56a13715c3ee1c266ef198625ae0e1957bc8f14a0f66880728a053eae3d6b262739fe3781f1ccd0e5dfba6c18cb0d14088cd4ca2f1ee198a
SSDEEP

1536:A/tCtv8K7TvL5ue7yqIRNdR/nGhfmKVJHD6h:Kav5Tvse7eRj5Ghu+56h

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b065b3c16ac792734b83462358caf8a9786788dc32ba27677ce695c9c91e3564.exe

b065b3c16ac792734b83462358caf8a9786788dc32ba27677ce695c9c91e3564.exe.zip
.zip

Password: infected
b065b3c16ac792734b83462358caf8a9786788dc32ba27677ce695c9c91e3564.exe
.exe windows:5 windows x86 arch:x86

dc73a9bd8de0fd640549c85ac4089b87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ