1d2f4d02e2c702b0651d8a722a19e77386287fe9977969872459d9d7494bf492

General

Target

1d2f4d02e2c702b0651d8a722a19e77386287fe9977969872459d9d7494bf492
Size

20KB
MD5

197564909d255f20d81b09bc468b5bf7
SHA1

d9babe817781add38476429967332b5712ee801b
SHA256

1d2f4d02e2c702b0651d8a722a19e77386287fe9977969872459d9d7494bf492
SHA512

a924392f82682e81bee6cc52bc035026ca424011ba7e69917f5c744fce0474528c74803d84a3d3a434aa3f167051c4cf97fdf7aeed3f2d2f8abab6730e20a6d9
SSDEEP

384:2IGfoveHE6iV8VtpItyhYjDhP78EJOKdJlToeNfhZp/OJ1B4PMj/es:2DPiuTpIttx7ZXWeNXJOp4PMzv

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6ba80f62984ae62f2bdd136a92e18c9809243ac014ec481356a1c579cbd4f254.exe

1d2f4d02e2c702b0651d8a722a19e77386287fe9977969872459d9d7494bf492
.zip

Password: infected
6ba80f62984ae62f2bdd136a92e18c9809243ac014ec481356a1c579cbd4f254.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ