2024MAX888[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024MAX888.rar
Size

2.3MB
MD5

dbe7f09944b2870f046704d37cc9671c
SHA1

a6e7f655ee5a161ae01abd0c02d54061ef256391
SHA256

63d7b1667b667bf462136a9c04f297963f4bd506bc04b11ac95c8f92adfe4576
SHA512

81cb4515952d7c33deb3ef06c6e32e356be48216e3c4cbd4996607109e501455d1a0b166b2ea9c1514dc1552199b6ba69ce32a18a493ca4ab3a85fe461bfb415
SSDEEP

49152:bSL7v3bJJ1Ove/nHdlkgcPYlgAwOgJ1KvBY0Ta3:bmbjM2f9DVRgJ1KJYz3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/lytZkjvfirewy.exe

Files

2024MAX888.rar
.rar
lytZkjvfirewy.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ