8d9f17b0988d6e66ae805a01239e4e34abc989920fc1f9cbda56cd036ff85098

General

Target

8d9f17b0988d6e66ae805a01239e4e34abc989920fc1f9cbda56cd036ff85098
Size

333KB
MD5

6d33068b2abd792e62df747b49f7ef6f
SHA1

e30a97abc198d8b42477aa05012d40f6e01b8033
SHA256

8d9f17b0988d6e66ae805a01239e4e34abc989920fc1f9cbda56cd036ff85098
SHA512

bd3253e40cbc60f73a77feb5b5358ff1f0f78e12794f1d358a5e6140c67f81d82f643b7a5782a6ae115356f871cd9b1d09b29d6a206081062e0a2b7dafeffdc0
SSDEEP

6144:ztSQvl8MXYCo0mZobG8tO9Bny7DZK5I+r+KZgEMUG9po38hGhEH:pD8M7vmZ+tODYYOxKCEMXy38hGm

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/23b62a27e3f5c424b16f31e5009af4f24c8bd13b1f035f87879e2a29236be7a0.exe

8d9f17b0988d6e66ae805a01239e4e34abc989920fc1f9cbda56cd036ff85098
.zip

Password: infected
23b62a27e3f5c424b16f31e5009af4f24c8bd13b1f035f87879e2a29236be7a0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Birding.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 377KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ