phemedrone | a5b5cfba83b36a9775be20b8e4af758d59f75b7698abff227210eb6178218e63

General

Target

a5b5cfba83b36a9775be20b8e4af758d59f75b7698abff227210eb6178218e63
Size

49KB
MD5

10ef42a4b004f6ac53e8305e1e98ac18
SHA1

510ecd3d7ccaf4daa82fc36eb78febabb017029e
SHA256

a5b5cfba83b36a9775be20b8e4af758d59f75b7698abff227210eb6178218e63
SHA512

6fb87270c429ff44abdc1a5042927425524819f9d4bd389d561357fe503997c89c239eb27f7626bb9f8c2f7e7dbb8dac6325776a0fc60479c31126b33dc0048b
SSDEEP

1536:5SxcG9IObsOR/kE4ETotlem2DwroWqsf/Q:5h6IMsOmEzUtlem2sEpsfo

Score

10^/10

phemedrone

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/54b546122916f4336069fdac754baaf3f6321c41cf518aa391e11ed07f2b8918.exe

a5b5cfba83b36a9775be20b8e4af758d59f75b7698abff227210eb6178218e63
.zip

Password: infected
54b546122916f4336069fdac754baaf3f6321c41cf518aa391e11ed07f2b8918.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ