InvPIF7894321[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

InvPIF7894321.rar
Size

27KB
MD5

e1c24a9a62e766adf6fe9db74b1a4399
SHA1

9d48c017b785214d0e9a35553dca6b22ad3b3815
SHA256

523993fbf1e5d9c995dc28d558130c4fed4e0359495211b0ffd25fd82445f901
SHA512

e2a7da3b73511bcbaf2d43844fa0292519b8401102ae3ec242b6d2a8884732be98f0e73890d33c5a00c288ce6db2a18c66d0d03675ca295242f54675eaef2714
SSDEEP

768:fpj/VjMlSOhMZG276c+ma9Z6u393RNLVsVYPvWi:fp75MlSTomax93DCVo+i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/InvPIF7894321.exe

Files

InvPIF7894321.rar
.rar
InvPIF7894321.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\Confiformsyalla\obj\Debug\Confiformsyalla.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ