06062024_1637_06062024_Product Sample 76438[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06062024_1637_06062024_Product Sample 76438.rar
Size

662KB
MD5

1bcd23c5c36c7642be8b41312a855611
SHA1

5adff0fc5f0045fa03bc0e8a2e3e5a20816494e5
SHA256

bac540b9ec7d3574bb291c2e04e07ab4d85e7bdd3a62cac1198fd813272b6d6b
SHA512

fd782f290580c5fbcb54358f46245649908fd40f004c1dae95c9ac982544af61be7d90bc59a0a6ebddb2542307c29a8791108949a5acf9b1c05aec9c2217b29d
SSDEEP

12288:4AvZPSD11MfoqZI5yx95Xa1LzrQd68/v3ZSIt7BQbS2rc:4AvsXMHC895KxQ1/v3ZDhSY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Product Sample 76438.exe

Files

06062024_1637_06062024_Product Sample 76438.rar
.rar

Password: infected
Product Sample 76438.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 783KB - Virtual size: 782KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ