Confirm!!!![.]rar | Triage

Sharing

General

Target

Confirm!!!!.rar
Size

548KB
MD5

6b03a73bf0ba079b96e65c73a1600d11
SHA1

45139bb99e3ae87f597431daa30a46fd2961f9ff
SHA256

bd9eeea5e3b56e0b6dfe7f745aed091c81a10e55a1504ea443bea0f44a9ff085
SHA512

6bf92480fd395bfda8bd6d01e465e2e212e1151b56a9a401d28d1e50344bb0c0173927e3a23f8abc562dbb353bf15d666e0bf312afabe35026ab6e50b1478f90
SSDEEP

12288:j9xKaS0OhDWvF6onLfOVcBuhtQiQNz541BY5mbx2S5Fx:ROh+3LfIL05Mt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Confirm!!!!.exe

Files

Confirm!!!!.rar
.rar
Confirm!!!!.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ