afafa9b39d5863cc22c5c14caf9af5f6ec49f1a8704a5fef328a2410be0cac3b

General

Target

afafa9b39d5863cc22c5c14caf9af5f6ec49f1a8704a5fef328a2410be0cac3b
Size

473KB
MD5

2dfbdeeba48d773500c1db32ebffb2d8
SHA1

0aa955d7ca7a2efffa85605929df9caf3783ddb1
SHA256

afafa9b39d5863cc22c5c14caf9af5f6ec49f1a8704a5fef328a2410be0cac3b
SHA512

d839edb1a7fc9c9e3a4374b08a9a44aaaae9ffdba64a609528602d3e2a057f570decdb8439b47ba82f846ef4d87f958e1cafd9a24e13e77e6763f08049f8e16c
SSDEEP

12288:BjNKgwIv4zGRFggNCwQ5NvMOqkeFb59ETYpnt77TNSHEeu:ZN5pvOGRFtNONvM/FOYpntpSru

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/0415cad6fdc37b6ef123d454f71afbb74f7d1a4865498606f3f6b7d12b1eb100.exe

afafa9b39d5863cc22c5c14caf9af5f6ec49f1a8704a5fef328a2410be0cac3b
.zip

Password: infected
0415cad6fdc37b6ef123d454f71afbb74f7d1a4865498606f3f6b7d12b1eb100.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 482KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ