INFECTED[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INFECTED.rar
Size

3.3MB
MD5

1e5d2a3f882c05a7bf41a1040c3e958f
SHA1

ef288feda763b4cbb900b492c190e6e9a5fab082
SHA256

3d64527f170af490ff518058d3e9574aaaf892ebcca3f4badb4bec03c028f4eb
SHA512

5ec6c701294fcec6bf43fa399f7abd427895794ab85e278ef523680f988255ccb350fae572329412c63c75a8a05f703ae34d4c39aab1d3e157cc308c8475afba
SSDEEP

49152:JnWBZgV8IHxdeWGu9WTb9RrQ5DyQdRsH5/9lVP/SDg4zQ/NpsFJuwVSkbi69rVgi:If0BxsWGu90RCtLsHdVr4ei/uSiJi

Score

N/A

Malware Config

Signatures

Files

INFECTED.rar
.rar

Password: 123
Moon Spammer V2.exe
.exe windows x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ