03a74d82184ee89a679148bd185ba7b3970c0fc29a9b1a7cfb96b6a1397b2c87[.]zip

General

Target

03a74d82184ee89a679148bd185ba7b3970c0fc29a9b1a7cfb96b6a1397b2c87.zip
Size

5.8MB
MD5

fddf7f45c0f9436b4bf88905c14e2944
SHA1

e829519f5083a7a62376e84f97a02869da9bc1f2
SHA256

5efc286e0d53574dad93a448a62dae040cb016937dea771a53154a79ee800714
SHA512

8649ee855ae7d69c3079a95dd48c3ee7b330efd1f74121e16a4dac28ab25ef148e7fad8d59a29ece8d2368d34079d713a89effec680eedfd6cb426df5df9b39c
SSDEEP

98304:AGEylr7o/8RDfAEPNMpo3VaiBDj6C9BbN4/bPNvp8NFO4nXAy:cB/ej/NMpaJBkbPNKFOgAy

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/03a74d82184ee89a679148bd185ba7b3970c0fc29a9b1a7cfb96b6a1397b2c87

03a74d82184ee89a679148bd185ba7b3970c0fc29a9b1a7cfb96b6a1397b2c87.zip
.zip

Password: infected
03a74d82184ee89a679148bd185ba7b3970c0fc29a9b1a7cfb96b6a1397b2c87
.exe windows:6 windows x86 arch:x86

Password: infected

eaac0efb9475689d7992d2b0be67c803

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
AddVectoredExceptionHandler
HeapAlloc
GetProcessHeap
ExitProcess
VirtualProtect
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ