INV and PAK[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INV and PAK.zip
Size

658KB
MD5

b26d82412e98b0ba5493bba71c97e871
SHA1

8799e15432fb1b4002f20092598b48208abe62c4
SHA256

f213a569cf0a8b823f8116f03f2e49ec48a0ffc2bd7bb202b638517fa8eb975b
SHA512

11de560629b738bf90c8a1f7596059868182e541e0c344029878b814769a48523cc19be31a9b5fa17edf577a33173ee7bf3eb5e539355195824770ef6b5fc0ea
SSDEEP

12288:2F5DsVjQ9OXl5MCpcqLtkvp3GGCvtWLMPoJTd:MpeQ9+PMCp+GGCvmTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/INV and PAK.exe

Files

INV and PAK.zip
.zip
INV and PAK.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 881KB - Virtual size: 881KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ