Confirm[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Confirm.rar
Size

565KB
MD5

0a6f1153431479cea26789ed97a293bd
SHA1

041ffec09f9500c7146c30b8b834d6513c10fadc
SHA256

7ae06f04ea6a1151c0cb52f49338c6234840c8804394814263ef92b72eab5311
SHA512

8204c1da91a69a65592742a04f0ba27b54df6fe1acea22383b2583d84d4566cef7b09d9a738bd6b1f890c12f31b3b0f5baf1f31915d37d0196da26f85741d58b
SSDEEP

12288:B48BWiB2q9QtsdHROya2I5u6LSexa6VfktdOgX+fOdawGLsDvBdzKLb:Zsw+sZMFlYQX5kWgO2daHLUZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Confirm.exe

Files

Confirm.rar
.rar
Confirm.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ