0b44fbe4d92ebc089cfe8d27b8470f70c992a74c85f2371bacee8b059dd8402b

General

Target

0b44fbe4d92ebc089cfe8d27b8470f70c992a74c85f2371bacee8b059dd8402b
Size

914KB
MD5

04dccbe4bdf5b64d4030160c8739b570
SHA1

679ecd5ac299fa09f9695e2715da50a88aaf7920
SHA256

0b44fbe4d92ebc089cfe8d27b8470f70c992a74c85f2371bacee8b059dd8402b
SHA512

4d0d9c5767cf246653725415baced874b6ed266d9cb903e230d1f4d5629be60206bb75e8b457127abd1a659e1967e7618e45a6122216c7fdcebf76904c6b6ad1
SSDEEP

24576:9evPuSmUN9yC+Fe/Nk2AzTpNm1fFt8lWDlcQ:I3bmw9yBMkXzTpNmFFi4D1

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/48864de26230a966a7b91425ec7f388726e8ddc5fea72f686d551dc49654cbc1.exe

0b44fbe4d92ebc089cfe8d27b8470f70c992a74c85f2371bacee8b059dd8402b
.zip

Password: infected
48864de26230a966a7b91425ec7f388726e8ddc5fea72f686d551dc49654cbc1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

auow.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 940KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ