Release[.]zip | Triage

General

Target

Release.zip
Size

865KB
MD5

1d19871b80998ec7c0757b843c0f59b9
SHA1

47bbc26434239ff28a20b33c489c79a1fb4cfbe3
SHA256

6d9efa6a286f4d4a5cfe0360c8aacd94c762c4ed68b3abc4f018c4e98b03e295
SHA512

5cf42f9eccb252b8dd5fdb333b56fe9ce177adadf8d7a35bda5afa758ed384161bfee1165d7cf0d872c1ff8e5053c79c60f8aaacc3f08c638bbe326df0a5b236
SSDEEP

24576:prQW2zmjP58mUtPwx3UR04PNqJSq9tl1Lnb47:pd2W5ip7PNmS4l1Lnk7

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/jokeprogram.exe

Release.zip
.zip
jokeprogram.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\a\source\repos\jokeprogram\obj\Release\jokeprogram.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 476KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
name-you-favorite-movie-but-add-getting-jonkled-by-jonkler-v0-38cm2dx9f63d1.png
.png