twamodmanagerv20[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

twamodmanagerv20.zip
Size

1.0MB
MD5

e6e720713beddfffca8447ea78af7b0b
SHA1

2bdbc44139915c67e506168c2d4a54cc4c878c09
SHA256

11adfbf84985b9d36d9855469fe3e5cf41c6f69d4ae406a1567767ddd3b8359e
SHA512

dc96176b47519d14de231d71b36024cd29881083df9bdccc40571f12c6f19807213ab8b8075f474a8de2f1589c56154c938393151f3ef34c1ca75d369e349672
SSDEEP

24576:F1jk9utJEx/jqiT+ONJtUs5DPHvdiYDtwG/xvPoTV9cp10wcYZMwhKH:Fa9KJKjpTTNJ+eDX0ytwGVPo59cf0wc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ModManager.exe

Files

twamodmanagerv20.zip
.zip
ModManager.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ