b301528413e5e2980f6076a985f262484cd458f6430e708935d54854f662efd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b301528413e5e2980f6076a985f262484cd458f6430e708935d54854f662efd8
Size

367KB
MD5

749d298b4292b3481f40ddd81f7ca017
SHA1

c102c5f3dd5261de2839efeb62a7d1cfda8c45b0
SHA256

b301528413e5e2980f6076a985f262484cd458f6430e708935d54854f662efd8
SHA512

f354074d033f2d631614f2b4ca91ac0ed34641b148314b5b79246f2f3c3a92a4dff2cef6cadde44b850a68caa35309352620a760e2594bda84797442e3fcd2e5
SSDEEP

6144:RwxBrFUxjYRY0ZqAsjPpJRcLrFg+qAVWYW2IuSxwcOmI0Z9eaqAERn:Ry7UxUtmjFuJqrLecOxKAaqFR

Score

N/A

Malware Config

Signatures

Files

b301528413e5e2980f6076a985f262484cd458f6430e708935d54854f662efd8
.zip
railworks3_train_simulator_2012_deluxe_tfile_ru.zip
.zip
railworks3_train_simulator_2012_deluxe_tfile_ru.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 446KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ