2032518fe24cb933160b56ca7c4fbe986f96fc53e9da9f7b4586d1d8f7d5477f[.]zip

General

Target

2032518fe24cb933160b56ca7c4fbe986f96fc53e9da9f7b4586d1d8f7d5477f.zip
Size

1KB
MD5

b2e0a290a4da2c526d0c5a878aec9936
SHA1

6d385200db943922138d1d4d97c76213bc574c5d
SHA256

32a06abc9d5ac4df4207089953d72c46111699d4057181b463d8070d5604a545
SHA512

9ceb8541dd7f3a7e42a37a4e61a249257d85b4237f0633f580e53ccb33f3d4c9708f7be771f4ff178b422ec2d1f6d7fd9a1096955fb91f04ef2c2fe4c0fa70c4

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MxYwXalx.cpl

2032518fe24cb933160b56ca7c4fbe986f96fc53e9da9f7b4586d1d8f7d5477f.zip
.zip

Password: infected
MxYwXalx.cpl
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ