99d2d25ca7a2d07de64449dbf6e5b9d4d64963b0ea56abaf9d8bd80f76a313e4[.]exe[.]zip

General

Target

99d2d25ca7a2d07de64449dbf6e5b9d4d64963b0ea56abaf9d8bd80f76a313e4.exe.zip
Size

1.0MB
MD5

8e7fe754b35f036605d63c847c32ab83
SHA1

bf92e1b7e68aa261ec95ac92d1018a85ca330fe0
SHA256

22a256f4a34a90609784492007d3a8cf33a478e9dbbf941b1d8f9c45a5738ae7
SHA512

b6309c6d4de8f33d0f9534c31c098126e390e5d6cbda79439aea5d631781e31554ec88d0e21e1a83eb897d7e06eb2b39553cc06ca7f19a4e04ced4c4f831b25b
SSDEEP

24576:b2CH5N/y/c+g4YaQUWUm1Rwbmu6QmsXrft/sA:bFN/y/K4qUommu6QDZ

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/99d2d25ca7a2d07de64449dbf6e5b9d4d64963b0ea56abaf9d8bd80f76a313e4.exe

99d2d25ca7a2d07de64449dbf6e5b9d4d64963b0ea56abaf9d8bd80f76a313e4.exe.zip
.zip

Password: infected
99d2d25ca7a2d07de64449dbf6e5b9d4d64963b0ea56abaf9d8bd80f76a313e4.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ