NotScaryFile (pass i_hate_jumpscares)[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NotScaryFile (pass i_hate_jumpscares).rar
Size

8.0MB
MD5

3231f945afa6828f42f0c70a5b70b655
SHA1

23d907f0085e2b9079228d6fe67b135335d021d2
SHA256

947f6287d5482605f88184e662ba90db8774068e68d0a1df1396e00a81e563c1
SHA512

dcab1bf6a925d91601241d37b4f3295aac8e929b7f0a1b994f8f5e1c0a174ca9e171fe3312ad4bcbf5deeeefd4f92aea5abb954649df82fb24a01e89c832c779
SSDEEP

196608:0wUEc8sgWHXsuK+eB9mhJXmsmp4WvUiB7DCUP2CUmuRj:0wUkm35xeUJXipUm20ntuRj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mandela.exe

Files

NotScaryFile (pass i_hate_jumpscares).rar
.rar

Password: i_hate_jumpscares
Mandela.exe
.exe windows:4 windows x86 arch:x86

Password: i_hate_jumpscares

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32.6MB - Virtual size: 32.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
README.txt