PI[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PI.rar
Size

765KB
MD5

e2c4b9c6a90e9d93775706a91391021a
SHA1

20d221372b3d31448109a15da1dc4112d1bc49b2
SHA256

25093e6d7e4a3a4132d91a2bc489446cdbab96d66a27614524e0d7722d16a770
SHA512

52bf5792de7455beb60c7132768bbb2b317b793bf74959cbf20d31cbe3f036cc085eb8fcbeb91de4a09f5402eaf8c5158a989957ee55ae472259b0b41071f2ba
SSDEEP

12288:5F1Rzo4AVv+xaD3RMUtUazUnTO4qGA9FzhsR85FwTzNwSenRn8tKDfBuHdm8F:c4AVGxM3sSUjqGOFzmyg/SSaFBzBuHd3

Score

1^/10

Malware Config

Signatures

Files

PI.rar
.rar
PI.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 901KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ