MSV80 reseter[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MSV80 reseter.zip
Size

622KB
MD5

796c5acf6be7e967799fa9ea200076ca
SHA1

55a93027562e1b40c317022da364de764e51b7fd
SHA256

a94009da8d92f59ae1d6d407a6537d46968925869055387a43e2d080f38bc942
SHA512

4bfe1d7c0192a8205bcbb375471256e3d56538e3f987f2965df3fe564050b5321dd87b9e62b5f26d10a4076261e1d9f42298536353c0b0163d72296993f35866
SSDEEP

12288:xycfdez0PEjzhMcWPkquzePn7NXrXMUxnq6pdqfntyQy6rE2n0L:By08jzhMVbvP7NbXMUxqoCJbE2n0L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MSV80 reseter.exe

Files

MSV80 reseter.zip
.zip
MSV80 reseter.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 446KB - Virtual size: 446KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ