06170092a30352f55796236dc3c884063f204dc66d499df68ecef22dbde7c54b[.]exe[.]zip

General

Target

06170092a30352f55796236dc3c884063f204dc66d499df68ecef22dbde7c54b.exe.zip
Size

60KB
MD5

6fadca526d2129737c8743e485c26d1c
SHA1

e911c92b667b580c094c62bddc8d98e5259a30ce
SHA256

a2cbc9fe99ea8131a91249ae21698c4522cf10665d39559c76510bca272de5b6
SHA512

3a1112e118d848016466f3500a12f0ac9b15a4798102365d46368b5d041db69b8df8214435cefb1daad14bdc72e8406f7e223c0d770c8c5df8e2d3055ced158a
SSDEEP

1536:n8pZiRcv6EafJDM/nQ0uTc96B5BjArTfNuN4Z7rLJj:sah9Tc96BoXfUS7rLJj

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/06170092a30352f55796236dc3c884063f204dc66d499df68ecef22dbde7c54b.exe

06170092a30352f55796236dc3c884063f204dc66d499df68ecef22dbde7c54b.exe.zip
.zip

Password: infected
06170092a30352f55796236dc3c884063f204dc66d499df68ecef22dbde7c54b.exe
.exe windows:5 windows x86 arch:x86

dc73a9bd8de0fd640549c85ac4089b87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ