f2145ee5f0d183ebb1f67b3463bf419659d25b867c677cb983736fca59df2042

General

Target

f2145ee5f0d183ebb1f67b3463bf419659d25b867c677cb983736fca59df2042
Size

599KB
MD5

c0f4ede41e8f9a9c43df4a5a61e6e011
SHA1

83f57c3f81ab98c51cc4a096679f5cb5680cef64
SHA256

f2145ee5f0d183ebb1f67b3463bf419659d25b867c677cb983736fca59df2042
SHA512

f7c80c03d0415ccaf5eced2dd80c3607c84758f47389a407b845c126b60036bb9390451094b00fcae338f39f42488e6fdbd05442d6bab1b221958ebe4152be2b
SSDEEP

12288:w9WcIVho/hlaKuUP3E3iSLQxkx+1XzkY49icD2oepCYBWeado2rP:SWcI4ZlaaEpLXA1XgY49iW9mCYBXado2

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/699af4e8e4d2f3b3ab73268c846f4013f677bc183b9c561279f88c0239972b9b.exe

f2145ee5f0d183ebb1f67b3463bf419659d25b867c677cb983736fca59df2042
.zip

Password: infected
699af4e8e4d2f3b3ab73268c846f4013f677bc183b9c561279f88c0239972b9b.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

TrAQ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ