walk_sim[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

walk_sim.rar
Size

42KB
MD5

a2bc9c3c81ccb407826e67d49b971bd5
SHA1

9b3d5deddcb3be5a470b2ec518569598af70ec55
SHA256

9e50664d6a36462eb9e90a1d2531b74a83c71b5ec510c5e219305111977a7da9
SHA512

751c59d6085d5963e5ef8571245866135560b2b073c55d5987b534e84bfb44c6d6d2732c707180ac4d2d0ce5e3f477c725c689e6cd8f32f1edcf902a3c30e2ae
SSDEEP

768:LDYlMmvu5DPYXckyxaNzAlWfnsMjDv48/Nmb4MyOoBsYOLHf5iVhJVpJh:LDYlM4u5DPYXckyxalA4sevjNq4Cms9G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/walk sim.dll

Files

walk_sim.rar
.rar
walk sim.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ