507bd648ef92cdf84a835e9b5498317fba43ce1f77bc7348ecff5d0f42d73779

General

Target

507bd648ef92cdf84a835e9b5498317fba43ce1f77bc7348ecff5d0f42d73779
Size

658KB
MD5

541bfa14ac9f6b0b2ba2f86930bd8849
SHA1

3acb3e53238f8797ae3fffc9a667bea585680c49
SHA256

507bd648ef92cdf84a835e9b5498317fba43ce1f77bc7348ecff5d0f42d73779
SHA512

8d0c2a8541e5c9670a9b80e0b71a8dad26dc48c7bd7ad9f10a86a0e6e211f75fc68c9319fe2f50e702df9408969d4f4627f3de686099193ce00d5f420eac0d84
SSDEEP

12288:DZnpUSQVMKr6+el9tWd3m4yUD4jAtEmJXFM8a/NwBM0Euy5ahh4:DBpnIMKrhM9Q1m4yU0AtnaV/NwBNI0S

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/e98837d8a5c7bde223cc25822eea7c8a42f2ebfa4afb69a7392779ac7f5399dc.exe

507bd648ef92cdf84a835e9b5498317fba43ce1f77bc7348ecff5d0f42d73779
.zip

Password: infected
e98837d8a5c7bde223cc25822eea7c8a42f2ebfa4afb69a7392779ac7f5399dc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ZFSU.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 667KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ