d1d74ec1039ff5aab99faf99bf70fb07f6b4c763a0c2fbc08b702ec9dcb03834[.]zip

General

Target

d1d74ec1039ff5aab99faf99bf70fb07f6b4c763a0c2fbc08b702ec9dcb03834.zip
Size

7.0MB
MD5

e95eb49516e5fdeeded20ac588c6962c
SHA1

2608890ac8b75cecc2051082231eeda15078bd9b
SHA256

71d073946074cd43f86aec5eb81be2853e9414ad02f293010bd1c19cb8332d39
SHA512

c05ee6a0bd82c7806da591dc067bacd3931a8fbccbbc37f349bcfd182e07cacff40cae2c91f61f545dc3a36f78b02b2ef9ab992e959e1d12a4f2f7b050d3b5de
SSDEEP

196608:FPweMWVFmF+vR+Ylk0BpLkOEuvPJtMl6XaRv5k6lS0Wo:qeMWVWeRxjEuvPnMqY5NS0Wo

Score

3^/10

pyinstaller

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
static1/unpack001/d1d74ec1039ff5aab99faf99bf70fb07f6b4c763a0c2fbc08b702ec9dcb03834.exe	pyinstaller

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d1d74ec1039ff5aab99faf99bf70fb07f6b4c763a0c2fbc08b702ec9dcb03834.exe

d1d74ec1039ff5aab99faf99bf70fb07f6b4c763a0c2fbc08b702ec9dcb03834.zip
.zip

Password: infected
d1d74ec1039ff5aab99faf99bf70fb07f6b4c763a0c2fbc08b702ec9dcb03834.exe
.exe windows:4 windows x86 arch:x86

Password: infected

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
psexec.pyc