6bd095cb1bd6af184bea86d85592823b06fc6920a05bb8b758fa94c0ff99eb14[.]7z

General

Target

6bd095cb1bd6af184bea86d85592823b06fc6920a05bb8b758fa94c0ff99eb14.7z
Size

720KB
MD5

c67cfe34a41385669201e85c32d17af2
SHA1

f7acc2ef9f926bd12dc49c13b034b3a30be1eb9b
SHA256

007d2e1f4a7682ac96c28c8c316af69c66e381f1c4497c635a35c004fb5413cc
SHA512

1fd56748ab514d255a30f6a9570b9dff2dbb7705ab68903fed3a9b578c7654f571cd605fc063a4e0aaef71fca020ffc0ccacc9a13dd6d6d4bb05fed8cad20c16
SSDEEP

12288:TP4/B2TF7fox4nzB52HhFgxBmXKkQ0BjcQ4cGIezhjqzDJALZySZs1zx1:j7VfoGzjKhgBmU0uNzgWZjZu

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6bd095cb1bd6af184bea86d85592823b06fc6920a05bb8b758fa94c0ff99eb14

6bd095cb1bd6af184bea86d85592823b06fc6920a05bb8b758fa94c0ff99eb14.7z
.7z

Password: infected
6bd095cb1bd6af184bea86d85592823b06fc6920a05bb8b758fa94c0ff99eb14
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ