6462fd77e1114ed3b247cb6cf2509206c7be512dad3aaea035d9cd09688056ce[.]zip

General

Target

6462fd77e1114ed3b247cb6cf2509206c7be512dad3aaea035d9cd09688056ce.zip
Size

176KB
MD5

2afd9d03a1b6345bd1a6bc01c0321825
SHA1

fbd5ef9c6a9bc912c9b8c3adb669d9e52c393de1
SHA256

e30d982feab8e030bfff7573d92bcb3a3dc32f0cd32001a9d81a9d559dc98539
SHA512

49196ff7eb9a77827d6a0250e37cde480d0aa3379fba37970c91fa3fa55119d571b4873b64c995572f342a2e2f54544d9adeae24b94ba5830178e829cc6efd1b
SSDEEP

3072:2Xx70p0AKEskJAZE0VtqQXvjC5v5/FLiDgGIdOORVU37LtcKz552xWWJ/sL8h:4x70p1KfFxVsQXvjeFF+SdOxFgBh

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/6462fd77e1114ed3b247cb6cf2509206c7be512dad3aaea035d9cd09688056ce

6462fd77e1114ed3b247cb6cf2509206c7be512dad3aaea035d9cd09688056ce.zip
.zip

Password: infected
6462fd77e1114ed3b247cb6cf2509206c7be512dad3aaea035d9cd09688056ce
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\mohmed\source\repos\SystemHost\SystemHost\obj\Debug\SystemHost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ