Netflix_er[.]zip

General

Target

Netflix_er.zip
Size

2.0MB
MD5

31c1fc561d4875fa260d0f112da25375
SHA1

28b5d2c58e8b197ab2892f309bc232dcd99769c2
SHA256

a883710e5ae3e4053a04ce0edd080d963f2cedb655df4ea867c422f764819f4b
SHA512

067630571904c56cf93aab14d7cca4249d44a5b039c36ab2daaebbcee43a56a03a2d2f24a0ad4f047405d8c54ceb264fb7added0605a05d3f168a98f4bf480da
SSDEEP

49152:orBqiUHDO+GtUOVkVQ6zPHjbHea//+cBNfFfeZo02tG5rOCWA:orBqiUHWUOyVJzPHPHkspeZoc5rXWA

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Netflix Cracker/DevComponents.DotNetBar2.dll
unpack001/Netflix Cracker/Netflix Cracker Coded By EVG.exe

Files

Netflix_er.zip
.zip

Password: 1234
Netflix Cracker/DevComponents.DotNetBar2.dll
.dll windows:4 windows x86 arch:x86

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.textxc
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.datax
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Netflix Cracker/Netflix Cracker Coded By EVG.exe
.exe windows:4 windows x86 arch:x86

Password: 1234

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admi\Documents\Visual Studio 2015\Projects\Netflix Cracker Coded By EVG\Netflix Cracker Coded By EVG\obj\Debug\Netflix Cracker Coded By EVG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1234

Password: 1234

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.textxc Size: 5.3MB - Virtual size: 5.3MB

.datax Size: 4KB - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 86B

.reloc Size: 4KB - Virtual size: 12B

.rsrc Size: 4KB - Virtual size: 1KB

Password: 1234

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 217KB - Virtual size: 217KB

.rsrc Size: 160KB - Virtual size: 160KB

.reloc Size: 512B - Virtual size: 12B

.textxc
Size: 5.3MB - Virtual size: 5.3MB

.datax
Size: 4KB - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 86B

.reloc
Size: 4KB - Virtual size: 12B

.rsrc
Size: 4KB - Virtual size: 1KB

.text
Size: 217KB - Virtual size: 217KB

.rsrc
Size: 160KB - Virtual size: 160KB

.reloc
Size: 512B - Virtual size: 12B