68328768074fad1d210db4aabb896d4826af75e7a0bca6f515b6c300a9adcde9[.]exe[.]zip

General

Target

68328768074fad1d210db4aabb896d4826af75e7a0bca6f515b6c300a9adcde9.exe.zip
Size

603KB
MD5

aa76abf174f394bf6a186b7bb2a3babf
SHA1

26b55622ad894fc87b0eeb75af22fa8a1b04b7f4
SHA256

a4114dd6ae4f57b2c5f54784062c87e4152f31d1d35bd57268297ecbbc30c1a6
SHA512

120740fb8cf9b3c558eba7806bd00ae59b2938872b54a3b9b3c92bb0e1dd4db4f65d6e6b117fe580fc94c62fa165d5688438a2bf30e41a5b897ed1cdd4d82d9b
SSDEEP

12288:D7PF9Ec/1wNVqXcQoDTH0eTmeZFRoetJxfxZAro66Gjk5N:Djz5/1oqM3n0/e3R7/oro66Gjq

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/68328768074fad1d210db4aabb896d4826af75e7a0bca6f515b6c300a9adcde9.exe

68328768074fad1d210db4aabb896d4826af75e7a0bca6f515b6c300a9adcde9.exe.zip
.zip

Password: infected
68328768074fad1d210db4aabb896d4826af75e7a0bca6f515b6c300a9adcde9.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 916KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ