Resident Evil 4 Trainer - FLiNG[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Resident Evil 4 Trainer - FLiNG.zip
Size

84KB
MD5

9e461340935e3069d93194ab6769c18a
SHA1

a5b7604710e540ce96b5f3c8ce8e6d3a1e4d809c
SHA256

fb49cabf1ca85d9f9239298c91da512f1bc7381ab24e6917ee7e424ba7212940
SHA512

5f9200385cee70113e79ca4317398212595cc6cd131e724b486289428e15a85461fdd32fd582f3b642b2c0fa1256bfc4ff217155caed83b2586c542cb8dfaacb
SSDEEP

1536:6TOm/XfIbmAYVAS3oqGzXSrRIgl4rqLrlmuqsYB4Z0UDBBXYavhYrd1xrngNs:4O6QbHYp3oqBrme4rqXosQM0KBfMd1hJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Resident Evil 4 Trainer - FLiNG.exe

Files

Resident Evil 4 Trainer - FLiNG.zip
.zip

Password: infected
Resident Evil 4 Trainer - FLiNG.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ