DeS-SaveEdit-20230411[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeS-SaveEdit-20230411.rar
Size

50KB
MD5

fe40b0b721e890acde2057ebb551324e
SHA1

a8151fe0c61ba76eb6c5e7bbe34b030801adf095
SHA256

0e8c0c5a1ac72a8152f4eb509a6b513ced358dc1e121a6905a6193f0983853f4
SHA512

649212be1f685431f54ec0b585d9b8bcd21dc111b1f1f787c62fd372a179bb7a09013cc970be7c39a243a9d2bf82e863a494a6a5fa4a097d71e8fd408f95391d
SSDEEP

768:xpDA4As9QT99RqyB5t28OgfhzD1X3svezJ1flyIuBnQ60LGvAuWP9BgJdVHH7:v+sKT9BBDvzD1X3oETflNuBGKL29BEb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DeS-SaveEdit-20230411.exe

Files

DeS-SaveEdit-20230411.rar
.rar
DeS-SaveEdit-20230411.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ