6c36f0ce2ac80fa05183f65aff20883cb30ea37b9374a89ff57a1319344e511b[.]exe[.]zip

General

Target

6c36f0ce2ac80fa05183f65aff20883cb30ea37b9374a89ff57a1319344e511b.exe.zip
Size

2.6MB
MD5

373b410b1ac5de9e414277203c97c6a9
SHA1

b1ab412a973687a2cc48ada5cf56def8767242e3
SHA256

e9fe67be5b5fc6ad6ab6a88647c234d8386e265ad55406be4bf173195ddd1001
SHA512

804c25e650c6b31a544d9c77ca1eaf2837c19fb065aabf87b72ac43ded6fa6f6fe2622c2a740144e946f53ede8c09b922dce302d65a09c1f4837fff5190f518f
SSDEEP

49152:UG412T8mxiqWRYKX8A21CqBTH43O+DIyBpznkYu9oALOQLy50m1RbPlbyTSmPFjG:J412Imx/WRYABQCqlH4+7yBpgBoGOQUx

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6c36f0ce2ac80fa05183f65aff20883cb30ea37b9374a89ff57a1319344e511b.exe

6c36f0ce2ac80fa05183f65aff20883cb30ea37b9374a89ff57a1319344e511b.exe.zip
.zip

Password: infected
6c36f0ce2ac80fa05183f65aff20883cb30ea37b9374a89ff57a1319344e511b.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 120KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE