PLANTA VS SOMBIS DD[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PLANTA VS SOMBIS DD.rar
Size

60.0MB
MD5

eb5d857c002b90d95d502a19e4e7e968
SHA1

719d8f92796249f137d32ea7fb6d39adb72a8717
SHA256

2cbe2be491f049763a61bcfd235b125814e4b002648947d1b7ccce12ed6cfeb1
SHA512

0d84267d4be86e4c0fb5770b451463f6c27b6ea2799b84fcc5a127ddbbb37768c57a193940651a0c1e8c1a91d5646006fb643a29f2bc3aa6a7ebdd8017d97954
SSDEEP

1572864:ofOAlneH32IevG4MANrUI8DPA2zSfBC3lKP+:QU32IuG/A9UIAPApylKP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PVZMB Setup.exe

Files

PLANTA VS SOMBIS DD.rar
.rar
PVZMB Setup.exe
.exe windows:1 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ