folder for stuf[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

folder for stuf.zip
Size

67.3MB
MD5

ccc0bdb8df185fb6c43e8411b465c4b4
SHA1

43fe3918d704acd07e95b2381fbf732b6f6152cb
SHA256

d96a0062ead50519bcc90823a356213b1424433b51c9672af65513feec738763
SHA512

c01aa8f36040fb809fc967faab10e9f18486f5f0ed12affeca46f712650d489f54a906c69a4383245bbf43a2659d633d7fee84b2df17d67a98b7ff5c55d80479
SSDEEP

1572864:eTMknRbV+KtB8KIr8DA+fOvSQauPOJt8xn5mPOMOJB1gX9HfFWQXfT:eTvnRB+Kj8hr8kIOvSQaui8xUGMOn+tR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/folder for stuf/Assetto Corsa 3d Model Converter.exe

Files

folder for stuf.zip
.zip
folder for stuf/Assetto Corsa 3d Model Converter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\documents\visual studio 2010\Projects\kn5 converter\kn5 converter\obj\x86\Release\kn5conv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
folder for stuf/K1_4BA_R35_2017.kn5