DN-180923[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DN-180923.rar
Size

731KB
MD5

b26d080e7eba22ff4b527c8cd6bd66cd
SHA1

2118206491b534cf04a20b588ecdd4a4e5dd0f33
SHA256

0386fb9f2e71bf464569bf6ec60803d503d239b2909a835c2ba67d53540d7108
SHA512

5627a8d81161e51985c67bce3dab81a90fecb9bab03817956dfd4bb12338b06f665158356677269e8a7d76ddc25d779138173bbb98429f7e696801bb991b5f13
SSDEEP

12288:l4gH2wWrg4z1ftGqPqiJ5/HvAhLSQafQY0DmEo+VpHCABaJ2yIm+oj4Kskk0j:nWrvVGuTJ9Pa0QY0DmEFpHUJ2yF+osPM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DN-180923.exe

Files

DN-180923.rar
.rar
DN-180923.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 777KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ