70799_promo_chaio_s[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70799_promo_chaio_s.zip
Size

132KB
MD5

d085a77b4fa1e3362f2dbe9a67adca59
SHA1

558aaf37de1a01271cd03c9bbc43873f9dd5fe92
SHA256

ebbc97268c62e6c3c46bfdde4ee908a3160000a23065fe84f1c6940b0c380da3
SHA512

b0094d81c35b87ef28a3380ffcefd73095e3849f0d73b8ed7f723dd142f146ac45a1220a130a18ecf6aa8c978700e936632a1a6555e595f06e0a0713eec594ec
SSDEEP

3072:9GhKuQ7J7vIwK1bOJYWppr+0ZMcZvh0pg13G0JCn:9u29vIwDYWph+0ZFlpFBJm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/F123.exe

Files

70799_promo_chaio_s.zip
.zip
70799_promo_chaio_s.zip
.zip
F1 23.txt
F123.config
F123.exe
.exe windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
70799_promo_chaio_s.zip.txt
megagames.com.txt