471a515a58f5bf831d0ae9922be70bff69a026b27785e459d7b163fa1865b585[.]exe[.]zip

General

Target

471a515a58f5bf831d0ae9922be70bff69a026b27785e459d7b163fa1865b585.exe.zip
Size

429KB
MD5

0c3fe65fcf6f308b72fe6b3c0a16f654
SHA1

36a17f7c15ed8141c57259f2d5b9141261d494c8
SHA256

e92645f266d8c750f036b9a2fcb0c193d14b71164e8849606fb188b474c6ba59
SHA512

b8e088550359d90ec3bdcef77e9feccd7e3f59b606143c8f5e55bffaf4ef3eb451321843a40d71b004ed77a1e546dfea299d06efd70e9b9891bbb0f742863c0d
SSDEEP

6144:k/jHc8zdmfylgUnlDzYGkU4rtGAvm/Sx79hIh6tE4pQ652wvT4GZ5DJMBdyjzpYF:A8alVn1Y04JPVx7TEjaDnidynphbpIYg

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/471a515a58f5bf831d0ae9922be70bff69a026b27785e459d7b163fa1865b585.exe

471a515a58f5bf831d0ae9922be70bff69a026b27785e459d7b163fa1865b585.exe.zip
.zip

Password: infected
471a515a58f5bf831d0ae9922be70bff69a026b27785e459d7b163fa1865b585.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1013KB - Virtual size: 1012KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ