RE Offer Request[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RE Offer Request.rar
Size

598KB
MD5

14cd46a14456cb563b7754e6c1f21d39
SHA1

652e1073239fa0570c000315c80ba17b86c0fb1c
SHA256

c9ea862e0fae95bc7fc1acc8ffd7afdaa96eac42c8aaf4d3c4ea47cd8b346291
SHA512

db9248e1497732b8f5fcd83b3c91e3e6bcbb2aeb7d826fc7a0766ff34a2c1ee15bdbb2e5196a4efa3ec3a6be232d84a9c5600db21d157ab0f05b5b5422df12e0
SSDEEP

12288:/98plpdqW0BlBhaOLknuyKrfFqf+4CyiVmpM:/HDB5Auy6Fq4p8y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GcCE76hjL8UkxbX.exe

Files

RE Offer Request.rar
.rar
GcCE76hjL8UkxbX.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 803KB - Virtual size: 802KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ