TrinityV2[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TrinityV2.rar
Size

41KB
MD5

5e27793213e2d025046875cf8a9a5bf7
SHA1

13653bf84067cdb984b08d4a4caf00fd029e10bf
SHA256

861393c4ade7e95bbe33677a965e9bddeda6a91b874954ae672368f1904a375c
SHA512

0d20f93f40c1718cdc79f86e2cafa5c5f9af8b9cb32a10c6e577d180bf9776b054460bd8cc13d4658cb9031fc02146dafdb2685de90ebcb515df7d90f044a645
SSDEEP

768:SWHD1rfWS2uxN8XjHdWS3pWnMv7OfcueNu8N8V6VRpTn:5WS2WNiFrfh/Ppb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TrinityV2.exe

Files

TrinityV2.rar
.rar
TrinityV2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\stake\Desktop\TrinityV2\TrinityV2\obj\Release\TrinityV2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 263KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ