22f2ec20a1c8eb6fff5c5942b1b0ec6d9380d4997657f5e5b2ba72732c4b0d4d

General

Target

22f2ec20a1c8eb6fff5c5942b1b0ec6d9380d4997657f5e5b2ba72732c4b0d4d
Size

556KB
MD5

59ed07c5fdd86b889acecc32536372cb
SHA1

fa8153722364ca112c62d76d75e6ae6521cc9fdf
SHA256

22f2ec20a1c8eb6fff5c5942b1b0ec6d9380d4997657f5e5b2ba72732c4b0d4d
SHA512

0bdaaea6ceb5f64e5b7516fa690d1d8a705e5ad8fd81dfcd59c42e5f1da767619e082363b78ad9199df84f262039c844b1e532e4fdffab6d0d9ad5f6832d0b29
SSDEEP

12288:RHpnLD3LV0hMV7GcIABlV0EKNctdYrI9mUdaeNYqN0vKm7UT:RHdDh0c7jB3gcvb9mUdaeCvvDW

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9a565700a3d3c7a802780c0e4ba717b082175fd33b5afc7dcfeb95905b6db784.exe

22f2ec20a1c8eb6fff5c5942b1b0ec6d9380d4997657f5e5b2ba72732c4b0d4d
.zip

Password: infected
9a565700a3d3c7a802780c0e4ba717b082175fd33b5afc7dcfeb95905b6db784.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ApVX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 587KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ