rookie-pcvr-beta_1[.]0_portable[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rookie-pcvr-beta_1.0_portable.zip
Size

412KB
MD5

c27e781bcee6e81deb6b42ca345b22bf
SHA1

5dd8481bfd6627d253e519f64d892572215e5f5e
SHA256

5a18a0c08cdfa5c80ad6f424511e109a95c74ce4738fbe27724eca9db64c13dc
SHA512

9cbc628805e43adb9a170be1e54f480636d1a63fa5c53f3b449f85cf6285515abfd30e5fec355c6e0bf3ab0b60849fe312f8d627b8a2e1c9a5e41fd7a0b32cc9
SSDEEP

12288:NjqYruREZurVrN1QlOF3iXG3PPZZBCHiVAywWC7:NM+ZuJrNfF1RZBCCV5wX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/[BETA] Rookie-PCVR_v1.0.exe

Files

rookie-pcvr-beta_1.0_portable.zip
.zip
[BETA] Rookie-PCVR_v1.0.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 517KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ