Creatures[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Creatures.zip
Size

853KB
MD5

4f8558ca390b28f52c45f207fedbf226
SHA1

96096ed80b7aef4b42a7d11aa08a03d8389d86ca
SHA256

e4a0c9fbd5f9db6c93855c5da7757f9bd11d8c6289f221e7d679ed88ec902dd0
SHA512

c2e87694fa3b8a4006ff7dbae702cab6c3d6a0e992d7078ae689675dda2a1769c7dfd64effc268e5597f26a571b2c4b5f0a406dc41445f1c7b0bf8924d813a77
SSDEEP

3072:qvBwerPBTQGDV2jeV4Y61V4HUhnOlB5DVQ1AkD/ovWhrZ:qJwerPBUGDV264r8UFGBVVQWkTQW7

Score

1^/10

Malware Config

Signatures

Files

Creatures.zip
.zip
Creatures.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ