Release[.]zip | Triage

General

Target

Release.zip
Size

121KB
MD5

7c0b1d5c4f02c08350d0ef92e061fadc
SHA1

63da04cb58282a02e9908aba6833fab4a1d247a8
SHA256

ee5eba34fe987e74dd36d8892fe8e0cbadbd1cc9bd0ce724b5e8e56fe1907df0
SHA512

a6e84db1f92a373b420cce9bb251b7da279bfb1d97c875025de993b82a1298f927518d4a5af2101bab33dcb20ec75d859f73877795453f15bea6b40f21f56945
SSDEEP

3072:2y5RmAQ7tQV4xONUAoJfAM84x/gRONpE6tv3qSMfpAx3R:Jbmk02U/fAM84xwwpEav6VBAX

Score

N/A

Malware Config

Signatures

Files

Release.zip
.zip

Password: pepe12344
AppCollarAyudaCaninaPC.exe
.exe windows x86

Password: pepe12344

793abde363cbe50f9193181d171f8a2b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
QueryPerformanceCounter
Sleep
GetSystemTimeAsFileTime
GetCurrentThreadId

api-ms-win-crt-runtime-l1-1-0

_crt_at_quick_exit
_crt_atexit
abort
_initialize_narrow_environment
_initialize_onexit_table
terminate
_cexit
_configure_narrow_argv
_seh_filter_dll
_register_onexit_function
_execute_onexit_table

api-ms-win-crt-string-l1-1-0

memset

vcruntime140

__FrameUnwindFilter
_except_handler4_common

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
settings/saveData.txt

Sharing

General

Malware Config

Signatures

Files

Password: pepe12344

Password: pepe12344

793abde363cbe50f9193181d171f8a2b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

vcruntime140

mscoree

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 168KB - Virtual size: 168KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 128KB - Virtual size: 128KB

.reloc Size: 1024B - Virtual size: 556B

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 168KB - Virtual size: 168KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 128KB - Virtual size: 128KB

.reloc
Size: 1024B - Virtual size: 556B