Static task
static1
Behavioral task
behavioral1
Sample
winrarx64611tr.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
winrarx64611tr.exe
Resource
win10v2004-20230621-en
General
-
Target
winrarx64611tr.exe
-
Size
3.0MB
-
MD5
8deeed0aae05793953e87b13c857d8e7
-
SHA1
d6744ff7c0639b132907b19294d5f63fe81d5d65
-
SHA256
e47ff7d8fb6a495433106a14adb48b1d4e16774ec34e059739207edc58cbb7ef
-
SHA512
90e9542384c02fe2ea9390f3bc8bb7296eb643ec793776c9fdedb4d410049f3c9520b3bb8491440592dc69b0a3a177666d8d0f034cadb8783bc901a913ff7919
-
SSDEEP
3072:wAc+OX1ujBRbuU2rfnGGrlzvO8Ul/lV/1t7R:g12BRbGGGJzm8Ul/lxl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource winrarx64611tr.exe
Files
-
winrarx64611tr.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ