Excellent[.]rar | Triage

Sharing

General

Target

Excellent.rar
Size

8.3MB
MD5

c691ba5d723d702a7a9ed8791769df94
SHA1

3e94d3296ec9e5f33ee7d82d22936a6534ebd9eb
SHA256

5af1b2b8d2c05c980dcc639322202c3c465ad25821c2c445559353da2b1930b8
SHA512

fff41e3f0a60c73c609b4b10eae80336203aebeb4d3dd07a47518059f575070b220bb4104a89809a000596d1d5c73dcb33b50c98c695efd0d72319f51849b44d
SSDEEP

196608:X/eDDzEnkU+z1KGFqLXGgmDl7jL48HJXT2VI2pj/7sXB9:veDDEkFKwCXGgmh7o8F2W2J/7sXP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Excellent/bin/Excellent.exe

Files

Excellent.rar
.rar
Excellent/bin/Excellent.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 555KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Excellent/bin/libGLESv2.dll
Excellent/bin/updater.ini