7efddbf0825853ea834ce3c763fa9828aa72cb4844e8a98c4b79eb832a138a0b[.]zip

General

Target

7efddbf0825853ea834ce3c763fa9828aa72cb4844e8a98c4b79eb832a138a0b.zip
Size

6.8MB
MD5

9887fcb8e17313edbb48db2a6926384a
SHA1

fbdae0eac3c435b21b5cc9e7f783f498cac693e9
SHA256

19d1d2d607a94b9178d7dc1ae8353a3da96fc8543dd8e1f52421e5ed40e954bb
SHA512

e60f6166677f650c1757c200830a6697cd71f8bb70130e001060b695866843f5c613d76fcab8490879e507c94d28a6ac2943a044ec27d312efec4dd3b276b5da
SSDEEP

98304:RCtq5De3IadtCRNT2yoMfGLH5G7cvV5BeCl68tbiPpfymO5VaX33ndHQ/OaVI0QC:gtQ3gfNswPYCLbiP87aXndHQ/VtQD+

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/7efddbf0825853ea834ce3c763fa9828aa72cb4844e8a98c4b79eb832a138a0b

7efddbf0825853ea834ce3c763fa9828aa72cb4844e8a98c4b79eb832a138a0b.zip
.zip

Password: infected
7efddbf0825853ea834ce3c763fa9828aa72cb4844e8a98c4b79eb832a138a0b
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13.0MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ