9c49954ab17359f4041b7f7eda9e00ff2aa2f3f7ced562d7a848f1924decbebf

General

Target

9c49954ab17359f4041b7f7eda9e00ff2aa2f3f7ced562d7a848f1924decbebf
Size

615KB
MD5

f9812b2bf194af902d53241929c7df5b
SHA1

cf07031efc5d3134d9389291c49914387d387b62
SHA256

9c49954ab17359f4041b7f7eda9e00ff2aa2f3f7ced562d7a848f1924decbebf
SHA512

14ba1420670f244646eea4c671779a3e3ba65e50b640461c260cff0b8c883d61afd23f5763627b9145c61fa34f11b2f1ac3001d54b391871fa196d6b1af5ec6b
SSDEEP

12288:xLp8K5BsbdOA1ji6BplAiJa96RGM1DrXtpZ8lBA4DENmTIx7nfDFh6W8pi:s12MrM98GM1H9OZEQTIZJ80

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4c677969cde4b12fede4247e99653415ccf938d98d4958d99af13193cefab844.exe

9c49954ab17359f4041b7f7eda9e00ff2aa2f3f7ced562d7a848f1924decbebf
.zip

Password: infected
4c677969cde4b12fede4247e99653415ccf938d98d4958d99af13193cefab844.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LHjd.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ