PK2023-0071[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PK2023-0071.rar
Size

113KB
MD5

cf540ad824c5843c86fa6eee0f43d6a4
SHA1

32fa232405106692a7f777342898fa8a08e38e3d
SHA256

3f3554de76f134896fd9e0092aa3c992e0550e01e661d0b7128a2a6e82ea5d6a
SHA512

29783bdb9fb755066739d0a39d1c140487da08e1f8432fa51e346cfd02c99a5f3a0060590ec4371962051aec6c5359ae2b2d75d3bb6cfd8aeabacc86c9342a6c
SSDEEP

3072:gX1CAd7Qe64WVc+PHtXaGt+xzNzrZp/mYe2+XCcqfFAujg:E1CM7Qe6VasYzNzTZe2+ycqfF5c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PK2023-0071.exe

Files

PK2023-0071.rar
.rar
PK2023-0071.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ