20f0f2780c487cedacfa7f20a8356b3a9dd404b1aeac6972c03943d4ad082b56

General

Target

20f0f2780c487cedacfa7f20a8356b3a9dd404b1aeac6972c03943d4ad082b56
Size

691KB
MD5

ee9028e7384f043f15b9ca5cfbb6de8e
SHA1

e64521cdb48db43525babb4dea7220c48c9e3224
SHA256

20f0f2780c487cedacfa7f20a8356b3a9dd404b1aeac6972c03943d4ad082b56
SHA512

42927afeb21feaf9329acf946c63fb152a5f2dd89f58334a96c8fe307eddc6dbe3fcc2c761ee495d07c4cb0bd40aa900c33a940683888b874c5b08238e879026
SSDEEP

12288:IkDXujq/jRS9hndDL2LCeDFSfg0TrpnIQztB1qnUnG5GqmEMHmklhpKmWNGHBPcs:hD+jiRS9hdDL2LCIyjrdIQzt2CMpF9Vm

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7db939f103732a9f11c55ba54b8b7aaaa35309cfda3eec039dd71d6bd9d331da.exe

20f0f2780c487cedacfa7f20a8356b3a9dd404b1aeac6972c03943d4ad082b56
.zip

Password: infected
7db939f103732a9f11c55ba54b8b7aaaa35309cfda3eec039dd71d6bd9d331da.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

livg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 742KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ