Signed Contract[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Signed Contract.rar
Size

516KB
MD5

b65fa086e4e0f4996db3e896eede5886
SHA1

4ab55d7849881270ed345dbd1e3f59d98bedd1e4
SHA256

d615527bab6d1eaad6b501648ca67b39ca3b9a9db91fb14ddbf964fe4825f896
SHA512

247123684c1e0249cf45e84be8e008b275320cbfd4b70fa464b927cc1d5ac3956a3d7e193706f6f7f7aa5e367d76ac1c7e0fcd184305c873a095d8369737f90a
SSDEEP

12288:1wBB17RdZkyEQR8806r4MefhT7FZVkqN3WK/99BAij:GbaGeg4hp5ZVZ3h/99B1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Signed Contract.exe

Files

Signed Contract.rar
.rar
Signed Contract.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ