FunctionalRarR[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FunctionalRarR.exe
Size

406KB
MD5

609273dd91da1a0eb83de58f086ef396
SHA1

218d49a53bf863179074e9100028ca5e7e33c470
SHA256

285326af4ad91ab4c41397f8e99b3a32cc637f962b7f0bc18ac037be505b1d19
SHA512

e8dd3d1704f228fd0d0de704869d933820c38b721a037eea2b62b92ac497d124a6fea497b43bd8e330bb6f22603b9e2f31051d00a18ef1d0d4d1ddb84fe9497f
SSDEEP

6144:xiwCH0HYohqrYjxxyEuNrYV9XPCthA9hGBAR/N8fk4XHiqRPtVHglE3Iub1tUdKs:dQ0/FxxylrYnXIG9ik4XbPtL4Uo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FunctionalRarR.exe

Files

FunctionalRarR.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zh_
Size: - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.~:]
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ