88283c1be1298e5884b5cbfc02999df22d12365512f4b5133a71d219b3aa631d

General

Target

88283c1be1298e5884b5cbfc02999df22d12365512f4b5133a71d219b3aa631d
Size

415KB
MD5

01556d60800fcb4fca888509d64d95ad
SHA1

74774e619814d268dc22ed205a320c984658caeb
SHA256

88283c1be1298e5884b5cbfc02999df22d12365512f4b5133a71d219b3aa631d
SHA512

c2617189a09a2fc881bcf4a3ae508696d73dd477fed0291fe12c8f90701aa37c514899391c406bd93f28a2f29dcc26f56aa4ee3d5aa1ed05c1e3ed0d239276a8
SSDEEP

6144:SGhDJzqwg5AH0+FjtdRxZOTAWVqg15Hq2uwwgh1LVVxlshVyxKLYLMAFuSEvi:SMVnXEVqgBZJj0hVyKLYLMA8vi

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a50078c294c3980c23fc8da34f3fd1dc8ca042e07e0f7f67696d7035ec84700d.exe

88283c1be1298e5884b5cbfc02999df22d12365512f4b5133a71d219b3aa631d
.zip

Password: infected
a50078c294c3980c23fc8da34f3fd1dc8ca042e07e0f7f67696d7035ec84700d.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\HFayo\obj\Release\HFayo.pdb

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ