60159d9309f2c600d7e8823658bcdf157301ddeef432d1284c7c326ce8460ed1

General

Target

60159d9309f2c600d7e8823658bcdf157301ddeef432d1284c7c326ce8460ed1
Size

228KB
MD5

0e5cd6bd0dade342f3448a437a6c8a78
SHA1

95f8870bbcb05ee37083e4e267cae3062004239e
SHA256

60159d9309f2c600d7e8823658bcdf157301ddeef432d1284c7c326ce8460ed1
SHA512

1e02981bdd82901890966497632f9422c8724e0103c7b30dc99770dc0f13a16f343278aaea395c322931d1d9a662a6913462e355da901157e2b65d1d96061ea8
SSDEEP

6144:fnqEl91yxzUvsl28fwbOCuvvXewPEDVUK7+plB4GEOFpb:Jl91yFXD3CuvfewPrKyBb5X

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/c199cf21b7222adf5758e64f97b828f9ab19b5b1d8b8339e90670807213ed79c.exe

60159d9309f2c600d7e8823658bcdf157301ddeef432d1284c7c326ce8460ed1
.zip

Password: infected
c199cf21b7222adf5758e64f97b828f9ab19b5b1d8b8339e90670807213ed79c.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Performance.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ