f50fcb8cf3bf932bc6c3d163cd103ea8a579204440452de41da27e205c33240b[.]zip

General

Target

f50fcb8cf3bf932bc6c3d163cd103ea8a579204440452de41da27e205c33240b.zip
Size

167KB
MD5

c033634866a82c1f7807fdfcb37e736e
SHA1

84704ca52c336f4b47ef72c914accc2e6a57deb6
SHA256

987aff504509f4ad9554be6854abc7cccc67417655fd7afb14007b4bbac483e9
SHA512

b21941537f45195a70353394ef420c2501752d2d72fe99ff62c3301e3170022b4c43f5ae3dcf4a2b4641413bd6d8f885aff2d051c191c85259647fd169d2a612
SSDEEP

3072:z46MUhK6YXda3v1gsNFVpnedQ/wQzqbFmLUtbOdOxoi7hCcIT2WoaGupI:znh5OM3v1gKFtVcltbpxossXZGkI

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f50fcb8cf3bf932bc6c3d163cd103ea8a579204440452de41da27e205c33240b

f50fcb8cf3bf932bc6c3d163cd103ea8a579204440452de41da27e205c33240b.zip
.zip

Password: infected
f50fcb8cf3bf932bc6c3d163cd103ea8a579204440452de41da27e205c33240b
.dll windows:5 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ