2c5345c08e558e398a92a272b5897cd27d44bbcfc6dc70edadc0ea474d0bba1f[.]zip

General

Target

2c5345c08e558e398a92a272b5897cd27d44bbcfc6dc70edadc0ea474d0bba1f.zip
Size

3.0MB
MD5

b929604e908548a1589c0935f8a2a4df
SHA1

16dfca512171ae72ed9b70abe695ec578040a537
SHA256

750a57b19524e4550199ff81abcaa2e1b8b80bfa7cec1d1ad2f7b26d0b800fdb
SHA512

3611d365a111cb4ac6c808f8fae798d5756574338039bd4fcc1c9d1f24b5494045e7c65b55eba88ee451ead04256709c932cb32412553bbebc82ea37c8ac71e1
SSDEEP

49152:A3B8HV/RjHsWDcTY+E8nzbjSi9Tww1/0b7sDK/8KRMMbjsd0Fb8:QC1/RjHFwTY+1jrxT/m0O8xCjw0a

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2c5345c08e558e398a92a272b5897cd27d44bbcfc6dc70edadc0ea474d0bba1f.exe

2c5345c08e558e398a92a272b5897cd27d44bbcfc6dc70edadc0ea474d0bba1f.zip
.zip

Password: infected
2c5345c08e558e398a92a272b5897cd27d44bbcfc6dc70edadc0ea474d0bba1f.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

crypto_frame.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ