INS Rem CrdT TT copy[.]rar | Triage

Sharing

General

Target

INS Rem CrdT TT copy.rar
Size

525KB
MD5

f501bd428377b0409f3c19b0be19643c
SHA1

d1b655aa1237992853ddb3dc8feb7a24a5cc6b10
SHA256

70d07397898f5f1ff1151749648c1208019f139a4f2a242a0e5759a4a8b5c8fe
SHA512

50db8d03751f38544500be34e8f6bcb6b904a61a25a7cf0002d279d240ca5bee7a1a69832b5b6afba88465a3b91fb0229e8aec5eb7ff64cc56d793840384dd46
SSDEEP

12288:SbSrFv7AWZ2lPCNbjQZO4lhPXchLgekSIICsU4O7XLATfxh:SbS6WmP9Z3HvcCjSIICs5OrLAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INS Rem CrdT TT copy.exe

Files

INS Rem CrdT TT copy.rar
.rar
INS Rem CrdT TT copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 678KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ