ALL IN ONE CHECKER(KAM3El)[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ALL IN ONE CHECKER(KAM3El).zip
Size

7.3MB
MD5

522e61f5f5157ea473bd8f8a020afbec
SHA1

0fad2584b5c89beef1dfc6c088c8df1aa152fce8
SHA256

ecdc0bdb8724f682c923d0512f7f3f67eb030e74f99969f6456837ea9e01f056
SHA512

811596db76b3b9efff80f73ee9939d07e804e30287d6a9112aa5abdaccc1303afc4f42d782fd2ae63258e1561966daf986ae4ba3853bda11caec40e5790a158f
SSDEEP

196608:I4pC7pue6rDd+s8crp2KLrXlEpg41KmECjltuVgf3:I4YtFef8QTrX+pgeXECZtWgf3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ALL IN ONE CHECKER(KAM3El)/All-In-One Checker_v24721.exe

Files

ALL IN ONE CHECKER(KAM3El).zip
.zip
ALL IN ONE CHECKER(KAM3El)/All-In-One Checker_v24721.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 6.8MB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ALL IN ONE CHECKER(KAM3El)/CriticalError.txt
ALL IN ONE CHECKER(KAM3El)/settings.xml
.xml