5cae6a81944a25e81e61e90d726b3202b26ea74bcd2593f9ef91b63a6e745ac1[.]exe[.]zip

General

Target

5cae6a81944a25e81e61e90d726b3202b26ea74bcd2593f9ef91b63a6e745ac1.exe.zip
Size

5.0MB
MD5

22966af309616ec9e0be29072242f5bc
SHA1

eb0d98826b01d76cf7b022cb558f2cbbb704a7c0
SHA256

30ddc4f95651ddabe2e2d0e3486d88932a143233e131cae3111aa112eab7e03c
SHA512

48425260e7c804790d9594dd6fef0286da99f513eb4357f26677dfc53e5730240e7cb8a40b605c54a03506a96842132b361573d5e06f02e4b38af34cd821e41b
SSDEEP

98304:BTJCVAy1s39Q6MaK9FsfMnam9kFkQHw8Q9Ovl+ztv1y/w6s4:xcVAy1IJMxSmt9yl0vk/vL

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/5cae6a81944a25e81e61e90d726b3202b26ea74bcd2593f9ef91b63a6e745ac1.exe

5cae6a81944a25e81e61e90d726b3202b26ea74bcd2593f9ef91b63a6e745ac1.exe.zip
.zip

Password: infected
5cae6a81944a25e81e61e90d726b3202b26ea74bcd2593f9ef91b63a6e745ac1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ