cc05f16255014ff65462677d57fe36baff89c741ab9c2b9b8b71ff24bfb7cd49[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc05f16255014ff65462677d57fe36baff89c741ab9c2b9b8b71ff24bfb7cd49.rar
Size

625KB
MD5

71fe929f572ccb9fccc4d3fa192a68b1
SHA1

e32dfbede3f6fe5c14687ae404c5208639dd6d7f
SHA256

cc05f16255014ff65462677d57fe36baff89c741ab9c2b9b8b71ff24bfb7cd49
SHA512

a59045a01e4ff281345160b73a5e52263b044144af3ee66c20e79cebc28fba8bb07d3785b16b802c0dff9f0d9b558d7d5bcb32287776eed057062ee0dcad7ed7
SSDEEP

12288:ms2v3vve/T5tQUKtbg7hsUvdOLk/yAPCH1Xrf2CNIaFz2WJe6Tz:R+3vve/T5t9qcpvdOLk/yAPw1bf2YfFl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Receipt.exe

Files

cc05f16255014ff65462677d57fe36baff89c741ab9c2b9b8b71ff24bfb7cd49.rar
.rar
Receipt.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ZeYg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 757KB - Virtual size: 757KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ