d8ab837569ab816c7e282f4ddd3e9dd7d45e7d9ffad5cbfd286d99704eac5d94[.]zip

General

Target

d8ab837569ab816c7e282f4ddd3e9dd7d45e7d9ffad5cbfd286d99704eac5d94.zip
Size

31KB
MD5

de576dffe67d0b5076e5a86e8df7ac02
SHA1

a669747d5a91374fd95c31a485df77f0f1c039ab
SHA256

e376398c1dc1ec27586dcb66b665c0bbfcb42311c2c3512c2c8f599ae90006f8
SHA512

b494002069d5839b5e9d301a2de42bdd733cfef2c48bf50b256661e08f16e401d7730d75033761fcc763209aa101cfd8ccefb0c28136dab81a825841e75c7289
SSDEEP

768:VlmSoVZld2rB61PVYmz2YdprJ3uxwlQxah41y2E1jRxP9Ei2p4H6I:VlmTZz0Y1Y093uxpYQy71dlGi2yHX

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ExchangeCredentialValidator.exe

d8ab837569ab816c7e282f4ddd3e9dd7d45e7d9ffad5cbfd286d99704eac5d94.zip
.zip

Password: infected
ExchangeCredentialValidator.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

{15?ESu
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ