microsoft-rewards-automator-main[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

microsoft-rewards-automator-main.zip
Size

20KB
MD5

a9e7e33cbf93e02efc08391234a8c00a
SHA1

7a214d4b58a79cdd82a38a2a28b4a38eb0f840ab
SHA256

45bd9ece0077341dcfe9aa8a81bb5cd1c06da4ff311e01067ccf140288237e2d
SHA512

eca944365b5d2b48a0ab41455e52a23001ae25b978caa295843454ec0554027711cab8259be44bf7d75a5b9d12e05a35859210a1c4aa1b90cd0e61dde6f16ed2
SSDEEP

384:0fmpNyWtJeAnc48kek6NErf/Woi1hNAFfTYBa5AQLuDCf19m1g9cbiQLjoM:0e7Xs4heqfuoi1hNAFfTYBmAWR+ieoM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/microsoft-rewards-automator-main/Microsoft rewards automator.exe

Files

microsoft-rewards-automator-main.zip
.zip
microsoft-rewards-automator-main/Microsoft rewards automator.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
microsoft-rewards-automator-main/Microsoft rewards automator.ps1
.ps1
microsoft-rewards-automator-main/README.md