a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da[.]exe[.]zip

General

Target

a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe.zip
Size

35.2MB
MD5

b1827b4e24e131ee9a2b45a66f666bb9
SHA1

8523e433533cb99813441fd1fc9e75d1661d236f
SHA256

0fbb26b75a76088dc3897627a942c51bfc1b3344067bc345bd0c5e70e9beeae2
SHA512

4c7864ca34dbb83da2c1db2908862f5a0d2ed2471d73857ddf83e265adaa584ae7c2c9dd2de78ee7368e4ccc26e355c7fe26a2502fdaf67677b55c79768b5df1
SSDEEP

786432:KTH7WrtG9BMWgPs4vb8B3xY2Y1wuzEOJLHIZMJlYRKiYaEfhUpcU:w7ObWgkI8B3O71XBLoZ0lYMLa4hUWU

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe

a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe.zip
.zip

Password: infected
a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35.7MB - Virtual size: 35.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ