V1[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

V1.rar
Size

21KB
MD5

5294bf64e293547d37378e1d675c6975
SHA1

2e267c7e9569711a366b6452a316af9e8dcd7c64
SHA256

ce7c74cfd77a8a072b59239d33a41d6859770ba9b52e351aaf50bb52ecd16a5f
SHA512

cccddfbfbf5538665046fa7d38c6e6f53bcf11f5ca15593f83bfa349e638305c7751badf193a5761d67400f6b773348913a762a5cec764e329d925fe9f2911be
SSDEEP

384:oI4ngAEso9WRKJBHltueO3UU+nnJnvM13hoD6d2g8r0GynGFWxJJPbWtNP/hH:54nhEso9apeOEU+nnJ013h2gE01GIJJG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Pasters Free.exe

Files

V1.rar
.rar
Pasters Free.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pasters Free.exe.config
Pasters Free.pdb