re_pac_tr[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

re_pac_tr.zip
Size

1.2MB
MD5

1137e3b803a2ead89e6ab28f4e01be6a
SHA1

2b3bac855d1da94adc23c9ed2748e6cda384e232
SHA256

61c9840e8318a6a9fddef2ee23dd4273d188e221036d17fb2d090d8fdb8f4f9e
SHA512

d5830a767ab02a508056ba23e2b1b328e7c3d297c006c5a1f99efa7e22d8c648feab6ef7522b5fc0898c0135ae5cb3df7d3a1b534cd56bb5672e2d719167910e
SSDEEP

24576:Uac69Ma8aYw7yoAMW74u5Qydb98faMDQ6oaLELJA+EJlTVuYY:Ub6uafYuyobW74u5Qu96aMM6T2JA+yVg

Score

1^/10

Malware Config

Signatures

Files

re_pac_tr.zip
.zip

Password: infected
re_pac_tr.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 816KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 441KB - Virtual size: 441KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ