WinRar[.]rar[.]exe | Triage

Sharing

General

Target

WinRar.rar.exe
Size

142KB
MD5

7e3cf425865de93ba8f2d78e6c30b4bd
SHA1

39e53d94cde85716514a2c7ed281b7ca5c249e71
SHA256

082e7f071c4ab06b59064a175028075cbcfb34c8ef2dd082d6667e6d14c8d2cb
SHA512

369f4aba3fd9478209ddcdce476df6cc2888634354ff3768a463d12fc7227b2204d2ebc30dc69f466af7f84ed3a0e3da0a26404f55fc275e685748e428cea0b6
SSDEEP

3072:ON75/tddxPZRxU9o+72Q+O9mLs49BeBuU2rfnGGrlzvO8Ul/lV/1t4:i9xU9V7qO9mLlBeBGGGJzm8Ul/lx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WinRar.rar.exe

Files

WinRar.rar.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ