1[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1.rar
Size

96KB
MD5

11afbedb093da3dfb354d34feda0ee69
SHA1

51eab7a585708d938e4a2ba79bd3c986516dff3e
SHA256

3907d3018acf8bc7e803e53a13c2e2e399c1e6c2036e396df0a279d8d9b53de1
SHA512

2892432a685ba60b70d5bcf39bb1902b3198d9521a6154e3561ffacd23266eeed30ba9ee75f00349ae12200d83083c07eb3412b8f4529fc2328aeee1bfc6ed49
SSDEEP

1536:i1jaAosQ79NHA9S+KbB49s54wZP7AjpLcDdaNo7tIXjONu99jl1JD9MTOVvr8aOW:i13bQZxUiWo4BLcDIo5eONu79hMi58fW

Score

1^/10

Malware Config

Signatures

Files

1.rar
.rar
Client.bin
HanzoInjection.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ