v1nVSMCOsE[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

v1nVSMCOsE.rar
Size

18KB
MD5

2bd66bf8ce2f3b0b7d6719eae9bec04a
SHA1

8c3cf549897214442b6c0a7c0bf96d6532b5840b
SHA256

e33553b8f48fcfa10701bf12436c99016c206c34f222109d1b9085d2e31c7002
SHA512

edad9db771ccd3b0e34666e4c5dd61b79682248c0542a85f30d311f7539b76d282e53fd2f3b3c5223821dc8408a89f78648bd18efd6439543aa1de9e706b7f05
SSDEEP

384:ZayMd8wjoEiMFfru4zZvOPcNMJstzNfv9ukiWla+UaOgRTRNnfyiT:kqIFTRz5OUNMJiyMUaxvw8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/v1nVSMCOsE/iyoup49jE.exe

Files

v1nVSMCOsE.rar
.rar
v1nVSMCOsE/iyoup49jE.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
v1nVSMCOsE/launch.cfg