a (2)[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a (2).rar
Size

606KB
MD5

1e866fffee2b66f330ae10cfc171e585
SHA1

46d58276e839d546cb8d2108da2c9e25538396fa
SHA256

747f6f877bb544ed52dde130f343645025e31918d40ff0af6ee61d4c40964a8e
SHA512

e76b0411f46ca05d5ad1b1fb7b71e5723b7477fb81395b682bcef71aeff6f0a83e1e1d2e056ee3cc49cb46eba80f79dd856b7c576d6b511f3e44c8651b8ef00e
SSDEEP

12288:u62LQoqIRR3VKKNk7IkN/Qw8uULOvYowDoB1ZWZJ29AsuueTm2VBs9kI18:u/LEsRdaQBBo+oBeZJ29AsFeTmPtG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2980-93-0x000000002FE30000-0x000000002FF8D000-memory.dmp

Files

a (2).rar
.rar
2852-91-0x0000000002940000-0x0000000003941000-memory.dmp
2980-122-0x000000007149D000-0x00000000714A8000-memory.dmp
2980-143-0x000000005FFF0000-0x0000000060000000-memory.dmp
2980-144-0x000000007149D000-0x00000000714A8000-memory.dmp
2980-90-0x000000005FFF0000-0x0000000060000000-memory.dmp
2980-93-0x000000002FE30000-0x000000002FF8D000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2980-94-0x000000007149D000-0x00000000714A8000-memory.dmp