766b8294e401d9c457d53e45e15e26591b3c5c86315d81d9d17e5696cc0f13e1[.]zip

Resubmissions

21/05/2024, 03:28

18/05/2024, 17:19

Target

766b8294e401d9c457d53e45e15e26591b3c5c86315d81d9d17e5696cc0f13e1.zip
Size

2.3MB
MD5

b287a124bee926e238f0df208ce771ee
SHA1

abeb33db5ee898c54fc6822d0fb5140912fb4caa
SHA256

3f36a7603af684c5104dfb12a0100121408b9ae99c8ad6752b8cad06530f8731
SHA512

03ab61545e4af8fa20bb44e8f9c8b4c8a96fcd3e87406d785e5744b96a8ab19335afba4e50d7c42e97aca33fce2fb578fe1b06026242b6f30bb55dc43c815eaf
SSDEEP

49152:g1O0P5Cs/xnAh4p8bTjvmlC7OFre6Zpkkr2FMzHjBffsIxXLMqVxNZ52t:4OA5Cs/xXaPjJOE4ppZHVfd7et

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/766b8294e401d9c457d53e45e15e26591b3c5c86315d81d9d17e5696cc0f13e1

766b8294e401d9c457d53e45e15e26591b3c5c86315d81d9d17e5696cc0f13e1.zip
.zip

Password: infected
766b8294e401d9c457d53e45e15e26591b3c5c86315d81d9d17e5696cc0f13e1
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\amsiwala\amsiwala\obj\Release\amsiwala.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ