9202[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9202.rar
Size

285KB
MD5

f0039fa489e01bf23e1a3723b0f40f88
SHA1

6f6387514386bf947c799211d0b7198d5b1a35f3
SHA256

903f7a40c82d711ff45f61104e88c7997d20a380da3b0fb3977e88a089a2403f
SHA512

23d009b0a88045b17d65d51d0fbeeb4609c123fb16a4f3324288f67789c93830596623d1a927456edd2cd7c727955cd1d40348cb0724ccfcdac102dec2c5ee80
SSDEEP

6144:PQE7NEuFoDAsOHdQV02Kocean2KEds8pe/nbYL3Y8YPQrPnbZdm:YeEuF0XO9G0ne1mqBLY8YYXZdm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9202/9202.exe

Files

9202.rar
.rar
9202/9202.exe
.exe windows x64

20637e179d1b5814cfff31fee6e85f99

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wininet

InternetOpenUrlA

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

advapi32

RegCloseKey

user32

SendMessageA

kernel32

GetOEMCP

Sections

.text
Size: - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20637e179d1b5814cfff31fee6e85f99

Headers

DLL Characteristics

File Characteristics

Imports

wininet

urlmon

shell32

advapi32

user32

kernel32

Sections

.text Size: - Virtual size: 178KB

.rdata Size: - Virtual size: 45KB

.data Size: - Virtual size: 9KB

.pdata Size: - Virtual size: 5KB

_RDATA Size: - Virtual size: 512B

.text Size: - Virtual size: 293KB

.data Size: - Virtual size: 25KB

.text Size: 384KB - Virtual size: 383KB

.data Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 72B

.text
Size: - Virtual size: 178KB

.rdata
Size: - Virtual size: 45KB

.data
Size: - Virtual size: 9KB

.pdata
Size: - Virtual size: 5KB

_RDATA
Size: - Virtual size: 512B

.text
Size: - Virtual size: 293KB

.data
Size: - Virtual size: 25KB

.text
Size: 384KB - Virtual size: 383KB

.data
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 72B