123121[.]rar | Triage

Sharing

General

Target

123121.rar
Size

9.4MB
MD5

dfa4c8a2509faf5a36a9cfd9596247c1
SHA1

550c1f00748d4a57758b0d3d74954d69b273f20e
SHA256

7f24f5683e7a2150082fb39e073d4931c2e2849046fca6afa0a9694c94d14b92
SHA512

f0ff7adcadd59dc32451a8816d88c2a2b5d1ff7fd559f37900c24f849f3bd6b66a3d8d3bd5f969806c58d42350aabd798ca80dd125deec52d2a706c084ff0d23
SSDEEP

196608:H4pC7pue6rDd+s8crp2KLrXlEpg41KmECjltuVgfvWmLAx5R:H4YtFef8QTrX+pgeXECZtWgfvWxN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack002/ALL IN ONE CHECKER(KAM3El)/All-In-One Checker_v24721.exe

Files

123121.rar
.rar
150k+DE+@Silverbullet_combo+(3).txt
ALL IN ONE CHECKER(KAM3El).zip
.zip
ALL IN ONE CHECKER(KAM3El)/All-In-One Checker_v24721.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 6.8MB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ALL IN ONE CHECKER(KAM3El)/CriticalError.txt
ALL IN ONE CHECKER(KAM3El)/settings.xml
.xml
Socks5_Proxys__ULTRAVALIDCLOUD.txt