Executor2024[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Executor2024.rar
Size

1.7MB
MD5

0d63e0a77277d5665bec3fa26f6ded36
SHA1

7ae9454bd131c514ace47954b5d8a2ad0a979804
SHA256

f73ea54ca63a53b56e6f92507d873381302b61d9c81d3895881fcbaf4e9b2f78
SHA512

e4917a2fdc9c43e64316102281d3b11340c40bfe1cee2dc617a5f29eb2916d1e2a7c1316034a36dcce51c241a674f32b43066fd7791ee2215dddd22e139d2ce0
SSDEEP

49152:1G6Ei64MBw9SwdJkMazO8fBQo9lLQ/rZyztmHQm:8i64MW9HdJgbeo9WzAzUHQm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Executor Injector Installer.exe

Files

Executor2024.rar
.rar

Password: 2024
Executor Injector Installer.exe
.exe windows:4 windows x86 arch:x86

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.z(QK
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.w[5b
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.;">Q
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/THIRDPARTY.woff
bin/bin.woff2
bin/release.eot