2cd8bNI2Q8OjPmz[.]rar | Triage

Sharing

General

Target

2cd8bNI2Q8OjPmz.rar
Size

630KB
MD5

3c91ba35ae61223001a2d341fcafec9a
SHA1

11af34cf012d4bea7aafb749da43c0efdb982f28
SHA256

ee9d2238e5ad0af5b8ec9d18d1d8f08811adb00adac338082e68dcaa34689300
SHA512

66a0d983ee25a3d0b74341a7090b42da46bfdfcacb78337d843b29526cfab92e4a01d048c134d2cb9617ead6f1fcb7832472db1b33b60cb12cde2aac9982b50c
SSDEEP

12288:nCGJm5DtbloAiStVgdcXGigpAp9xKU3o7OtI0MYMzulNuQwJw/c6qujhEFh8GwDB:n9c7bloAiSIdHrpa2h6q0MCwJwER+uFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/2cd8bNI2Q8OjPmz.exe

Files

2cd8bNI2Q8OjPmz.rar
.rar
2cd8bNI2Q8OjPmz.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ