AWB_NO_907853880911[.]rar | Triage

Sharing

General

Target

AWB_NO_907853880911.rar
Size

658KB
MD5

635b0502be682add96eead455b2b6450
SHA1

af1e32d9c0232b3ea8463d67c97d75b8d9ecd46c
SHA256

a3e3a77f4ee52076c543579edc0bc74dacbd92c878eb357cb16740c14df20124
SHA512

76301831364cf61682a3018f3f85d872d2ad3362d8e5ef4abadfcf87a30f559fc59d8062397d85ada21b1066050e5d334d78c93f123a77fcb1f2eb96f3fc9d9b
SSDEEP

12288:8PCJ3XIoxCDYnmcMgDq0N+Ww0hC1OupdnYeIipDCScxOaSX2Hd:8PU3XIox+umFoP3hCKifcxOr2Hd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AWB_NO_907853880911.exe

Files

AWB_NO_907853880911.rar
.rar
AWB_NO_907853880911.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 671KB - Virtual size: 670KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ