1a18aab82e708ee1a490efc1eba76019b2dbbdf95cdb3db41a7f3ec07f8f0870

General

Target

1a18aab82e708ee1a490efc1eba76019b2dbbdf95cdb3db41a7f3ec07f8f0870
Size

621KB
MD5

052c70dba4fd2aac0fdecf425454d2f7
SHA1

e1029afcb056788e234be514516421b5f73358e7
SHA256

1a18aab82e708ee1a490efc1eba76019b2dbbdf95cdb3db41a7f3ec07f8f0870
SHA512

a2bfed552bd6fe210a118b8cb7748d24e5fdcae854839d42a1c81ce93a537197f5e73104fcf57eee821d3a906d4bc91200cb75d46ac0fe999c9442fe564634e2
SSDEEP

12288:MaFJbXQnoLntr+65LMiC4Gz1feQsV1Zbn0vljfHZUY:TBJnZ+6XHG5f8H4HZUY

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/460b2b74ef23d427bef4a5406b8b2cc09b4b1efa178cd0f32b6ac105253f237a.exe

1a18aab82e708ee1a490efc1eba76019b2dbbdf95cdb3db41a7f3ec07f8f0870
.zip

Password: infected
460b2b74ef23d427bef4a5406b8b2cc09b4b1efa178cd0f32b6ac105253f237a.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YlAU.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 642KB - Virtual size: 641KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ