F1CHA9902_RPK_ENG_SPA[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

F1CHA9902_RPK_ENG_SPA.zip
Size

470.0MB
MD5

890ede946db23551976c62cc903208cf
SHA1

8f6f8a009c7909e89978938bd592737aa5748eb4
SHA256

64373b39c747d0d8cd3ec46f8fdad94f4f554fcc057537cece836797d6a656cb
SHA512

df4c63034d72d560b1d36a0c10c7c56fa941537c44ecf0a9cb80b56ffa9b541fa8d5c22e157aa32cf78509d03f72740339e54154a542c4b78cba0c1511fb77c6
SSDEEP

12582912:1f5OV1kZTgz1I97p2W8NHcYnYChNGCPpIEbJmxbiS8W/O:fOV69g6938NHIChBVhS/O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe

Files

F1CHA9902_RPK_ENG_SPA.zip
.zip
Setup-0.bin
Setup-1.bin
Setup.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ