4f499e5a665e198de54df0bb38677f6b1b4a5441bb39279b3d55fbf057b0d299

General

Target

4f499e5a665e198de54df0bb38677f6b1b4a5441bb39279b3d55fbf057b0d299
Size

646KB
MD5

ccb627bcc177f66a2e0f9a67342d638f
SHA1

77dc91bef597aaea328e231d82f7f03ed679b0e8
SHA256

4f499e5a665e198de54df0bb38677f6b1b4a5441bb39279b3d55fbf057b0d299
SHA512

7f70deafef31fdf436d1f297b678b5276cdab2dee650cf97381a8f20710f59ec53d49dd25eedf46e85715444621a0e6ce3b4794e3da1da10f1e9e8e7f523e1ce
SSDEEP

12288:9CKw079Kw0Vbmj4ig801PqRBCluHVfsAUOk3wL15kwM0GYK10:8vVbmEjq/CYVkru15kwM040

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6303997ee7991fdfe0c2e0807c3d961fbae0cc5542a68ca7d39851bdf9a5cc55.exe

4f499e5a665e198de54df0bb38677f6b1b4a5441bb39279b3d55fbf057b0d299
.zip

Password: infected
6303997ee7991fdfe0c2e0807c3d961fbae0cc5542a68ca7d39851bdf9a5cc55.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

OCKAU.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 672KB - Virtual size: 671KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ