InstallLoader[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

InstallLoader.rar
Size

5KB
MD5

76308066a9fd6eb6946ccede26d087e3
SHA1

11ab2dfe731b365f0994375bd5b5f5fd27bc05c8
SHA256

d7d18265af69097dc84bdaf592f3179520b55c933037e442e756adbcfb1ff718
SHA512

86fe85d197ac8e6242664151fdd87be9f03f6d250f69e4cacd43c2e3a3439900159533df45ffdaa1e2e676dfcd67ff57243c127f08dd574c14c407e03fa60d9e
SSDEEP

96:G5J0QykMCm7vDI6eAm+R0YnzeEH1JODDU0axH7ElnFJi16dcCw2vCwOno/vU62:G5lmn1m+VnzrH1t0axkyGcCw2vNOno/O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Install.exe

Files

InstallLoader.rar
.rar

Password: baunticheats
Install.exe
.exe windows:5 windows x86 arch:x86

Password: baunticheats

601b72120a92eb13d290685341e0e0e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
GetModuleFileNameA
GetModuleHandleA
GetLastError
WaitForSingleObject

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ЧИТАТЬ, README.txt