24ac43d82630c23aedabf28d2a83efaf43d5578ea468ecd5437bc9f21973f323[.]exe[.]zip

General

Target

24ac43d82630c23aedabf28d2a83efaf43d5578ea468ecd5437bc9f21973f323.exe.zip
Size

1.2MB
MD5

0b8b671aaf544ae2a357cda41ee87d69
SHA1

7b507b63e61c67aa6c219135189c69a1482a3367
SHA256

e1f62ac2d1ec35977eff24c9a44add5cb48b4f31b551d6e93dc88f8a36110dcc
SHA512

3777d80c5e18197673cd1b887564beff47e149fc921cbc003392fb241e93284c1b7c4e61b6c07dbcf5e6fe263aa9f671348e153f8508737f52b9cd2e42d84d2c
SSDEEP

24576:j3RwxET6GM2DnIKMKsKIhOP0O3TZnkCKArQXMFInMWeigaWyvS:7hT6GM2DILKsKzPviXMqnMWelsS

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/24ac43d82630c23aedabf28d2a83efaf43d5578ea468ecd5437bc9f21973f323.exe

24ac43d82630c23aedabf28d2a83efaf43d5578ea468ecd5437bc9f21973f323.exe.zip
.zip

Password: infected
24ac43d82630c23aedabf28d2a83efaf43d5578ea468ecd5437bc9f21973f323.exe
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.code
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 413KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 901KB - Virtual size: 913KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 180KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE