cf3faec9d813395e79be975c4fd5bfa1290ceedbdca783b189d0e78db191080b

General

Target

cf3faec9d813395e79be975c4fd5bfa1290ceedbdca783b189d0e78db191080b
Size

648KB
MD5

4f62ae5b69c8dbeca92ea0864c20b168
SHA1

6e2391466a61641fe2591986772a52573900fd26
SHA256

cf3faec9d813395e79be975c4fd5bfa1290ceedbdca783b189d0e78db191080b
SHA512

df67fbbd40088d601d7232c15b2a5264d518e57ccc4b7b3a3ff1def7c159acc9607b49cabd1e41bdd6809c3b6eebf8faccd9a55f06eefd7bb06f13702ed53622
SSDEEP

12288:t3OPVpmyzH+ulht17f49dTAwdEm5+j4uti6KFnf/zWvbeG/AU1DiFVN46J8A:Jeky6ulrpQuwqm5wtmFS6U1+FH8A

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/135a046874c7621664f5259d83120e71c426fb40d54104a27a6fd25cb5d2f9c9.exe

cf3faec9d813395e79be975c4fd5bfa1290ceedbdca783b189d0e78db191080b
.zip

Password: infected
135a046874c7621664f5259d83120e71c426fb40d54104a27a6fd25cb5d2f9c9.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

nDzr.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ