ElectronV1[.]rar

General

Target

ElectronV1.rar
Size

13.0MB
MD5

3a0a1d8d07eb1bb3f99843f49cf1129c
SHA1

30c429f5c6fd6ac65c550ceb955c48bc27962c66
SHA256

a7ea2a6f73d44aaa0211f0b4c1340dc010e1e34292826b72f1d0d8ea0dfb442a
SHA512

375695083e7ac5bffed05702bbf31e333a021fa6e7670fcca2e138e88f9f0cf68adeb409d812f848b895139103a941a36e6df72cf4bf0b2404a62ae44fbc5827
SSDEEP

196608:YfnDF0lH/qUoC01f6aWnBg5x9/H+iTyj/QzbGTVuGWV05H3pwsobXramFVsHsa/G:YfJafhLah9/Ru5uGHJpwRbama9KcW

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Electron/BypassDLL.dll
unpack001/Electron/Electron X.exe

Files

ElectronV1.rar
.rar

Password: 1515
Electron/BypassDLL.dll
.dll windows:6 windows x86 arch:x86

Password: 1515

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

Size: 1.6MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 723KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 90KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 89KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ez
Size: - Virtual size: 14.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 8.6MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
Electron/Electron X.exe
.exe windows:4 windows x86 arch:x86

Password: 1515

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 319.8MB - Virtual size: 319.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1515

Password: 1515

Headers

File Characteristics

Sections

Size: 1.6MB - Virtual size: 3.2MB

Size: 723KB - Virtual size: 1.1MB

Size: 90KB - Virtual size: 297KB

Size: 512B - Virtual size: 520B

Size: 89KB - Virtual size: 113KB

.idata Size: 1024B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

ez Size: - Virtual size: 14.3MB

.boot Size: 8.6MB - Virtual size: 8.6MB

.reloc Size: 16B - Virtual size: 4KB

Password: 1515

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 319.8MB - Virtual size: 319.8MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.idata
Size: 1024B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

ez
Size: - Virtual size: 14.3MB

.boot
Size: 8.6MB - Virtual size: 8.6MB

.reloc
Size: 16B - Virtual size: 4KB

.text
Size: 319.8MB - Virtual size: 319.8MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B