RC 3 Return of Alaska Reloaded [Other s][.]7z | Triage

Sharing

General

Target

RC 3 Return of Alaska Reloaded [Other s].7z
Size

399.9MB
MD5

ac72ef013767f2e86cc79245b821c4db
SHA1

b6e32fa9e208c046e640488b87c05a20defbd3dd
SHA256

ac141d90b8c87e3abee8e33473744cae18761af96f4c47b26fd82626fb47bab6
SHA512

daaef4eff79c757e95ca41e2a32eb67037a2dfceabd05dcca08dfe78bbcc42386bd0127139f9f6f3f247b86bf217672cfa19baff0d913358ea39506ba78d574f
SSDEEP

6291456:x7Az+2yEk2nk+XktU3FkeQt0NYbTGL+HyxuMrLszhXA+u06j75hQ0vXgPn:xkz+CXZ1kxbCL+nzbAP/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/setup.exe

Files

RC 3 Return of Alaska Reloaded [Other s].7z
.7z
Data-A.bin
Data-B.bin
setup.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ