02a150daed3095794b6c551c6f0f9a4e681c4a81b7dfa6a5c17b427a3396230d

General

Target

02a150daed3095794b6c551c6f0f9a4e681c4a81b7dfa6a5c17b427a3396230d
Size

660KB
MD5

202606904862e3d0b1bc93bfbcb85882
SHA1

2782b3ba38a875c1d202f0e72a5ca9b9880be1d4
SHA256

02a150daed3095794b6c551c6f0f9a4e681c4a81b7dfa6a5c17b427a3396230d
SHA512

3b6de6eca56f6702ccaf13bc304047679faae8658da5e4384cf9dadc5be5c7f16a6eb10bfbf4676c1dea9b3eee301f3ed29383949cc3adb53bc6049d5bbf3baf
SSDEEP

12288:tiFt3uAAQgnD4U37bvgKSs+DdMkmwoxkU41hkegLbwF1F0Rp2S7hPR9VJ:0Ft+AAQgl/vbUDGPwl5hkeMbU0D2SxtJ

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/be1cfa406d8ed5411a49fb64283c6a120e0c43a31df164acd8de332cdb89f411.exe

02a150daed3095794b6c551c6f0f9a4e681c4a81b7dfa6a5c17b427a3396230d
.zip

Password: infected
be1cfa406d8ed5411a49fb64283c6a120e0c43a31df164acd8de332cdb89f411.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

BNma.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ