a6ae703da8eab0f1d26f7819d16202a17a000c342c4b3dc0cd11d535b5b50511[.]zip

General

Target

a6ae703da8eab0f1d26f7819d16202a17a000c342c4b3dc0cd11d535b5b50511.zip
Size

700KB
MD5

01b157a247cb914c6d55c62c10051621
SHA1

2613cbbef65241187234c1f240b704de0dd4de62
SHA256

98a045e147fe747d1d3932d6e5908019f3386767548e5be7c057e261d2e75f20
SHA512

e5fc6d6b7ca0cbced07043d805ffb5249ceb5167bf0f565d6ffe6c26fd4496c4ba25f10345ff9e33bc69ea3d52661d624e2d4530be65568f989e0ea380d029a7
SSDEEP

12288:szAj18DGNOBN0t3RZtQMom6OvNsB6JEsaq/bDrj3JE8X/byjQJHLyPtqBG2CVAS:v8DGyNe9D76aYsBV/Dz/jUQJH6d/

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a6ae703da8eab0f1d26f7819d16202a17a000c342c4b3dc0cd11d535b5b50511.exe

a6ae703da8eab0f1d26f7819d16202a17a000c342c4b3dc0cd11d535b5b50511.zip
.zip

Password: infected
a6ae703da8eab0f1d26f7819d16202a17a000c342c4b3dc0cd11d535b5b50511.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 913KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ