lite[.]rar | Triage

Sharing

General

Target

lite.rar
Size

77KB
MD5

a0ac394ae27de98f21e5996d689e2889
SHA1

529c365e97ef1a0ce288a43e2b29649f7c6f8e36
SHA256

b25deb87f1c6383b7358b42bebb757012030086905847a68bc0b3a66dc728735
SHA512

aee0659878b947b53fad4ca404a311a081adbd2322b4982cca53f8c54a75d236a66037e079b453ade4994d0b036fb30e1b860704a9a5ec0c30f8a1377c7664e7
SSDEEP

1536:9xiTTIiSSb21aYqhpZwylokpfSDLWEnFMDXfAo+zlo7RYLZbfaq5Wrs:9xiTcibeaZLWVkwDpUdnmLZbfPV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/lite.exe

Files

lite.rar
.rar

Password: lite9876
lite.exe
.exe windows:4 windows x86 arch:x86

Password: lite9876

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ