f5ef29ab55a9cb68ae90658823fee0e64a204669cf92811677faf9ec9b2efce2

General

Target

f5ef29ab55a9cb68ae90658823fee0e64a204669cf92811677faf9ec9b2efce2
Size

693KB
MD5

5e081c5a8a483c3e88c8c1e2f8aff951
SHA1

e3ca56d301927d079371df64f2a757ca8a0aaf6a
SHA256

f5ef29ab55a9cb68ae90658823fee0e64a204669cf92811677faf9ec9b2efce2
SHA512

4da02e1ff9b12d1a2ad78588e6a24c249f1d128efe6bc1fbd3fea808f6590a2a90c4d006e9e8b02c855ddf73e03b9ad227e118344bb401adc9f61162d7e5ccd3
SSDEEP

12288:7RN8ek7zH23q0f7JWsnlEyvZvAA297FGYlOLy7q6wJ4AdZmhgigB34OKnAohFY:7T0zH2zIslEcvA5StOq6Ad6Z2oOKnrY

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7ef2eb1300fe570cf84f21c18ee5350197c02698e16dc65de98c2989534456cd.exe

f5ef29ab55a9cb68ae90658823fee0e64a204669cf92811677faf9ec9b2efce2
.zip

Password: infected
7ef2eb1300fe570cf84f21c18ee5350197c02698e16dc65de98c2989534456cd.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

zugZI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 836KB - Virtual size: 836KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ