TrinityV2[.]rar | Triage

Resubmissions

01/06/2024, 22:10

240601-13rcdagd4y 8

Sharing

Copy URL Twitter E-mail

General

Target

TrinityV2.rar
Size

40KB
MD5

61b964bc68ed0f2d0a8cacafe9013e93
SHA1

645edcb73d0bb486204a5c9b538768ecd6fc0fd3
SHA256

f1cd7631df5a9339b0b98912ea2a6da47564076109680b8e912f9929a0f5c094
SHA512

ba4b56b8d7c8e8a49b39e8c6c0ccfa12a9167e220cb273ba79aaad3c191f89ee0d61c28c8e30a460aa372bdcba3dd38b8cf93232a099afbf00e806547ca23db4
SSDEEP

768:ez0AMjJx7GVm0U8UHBGw3jt+FA2Qc+fe0CytBykSdhhIFo+PwaVyi8sa:eIAMjJ9GV1r6sA1c+fHmkYhI/9VyCa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TrinityV2.exe

Files

TrinityV2.rar
.rar
TrinityV2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\stake\Desktop\TrinityV2\TrinityV2\obj\Release\TrinityV2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ