Main[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Main.rar
Size

275KB
MD5

053ae76f7003960cae4f0ee0cff7b8b4
SHA1

f77cc54022c13d40b616db4867b7ba821d0258b2
SHA256

1345aeab1bdd7097686b29f64e0edf280d7837e7e2fc9fea8f0ec0af67a50f67
SHA512

86f876210d216bca96834a3acab439ded97ceb884f3f179542f02292f42cbde6512e3efce8b8cfbe29ce797b3f8f6514a32d7a7e6fb720b9e5c22f65830fc9bb
SSDEEP

6144:u9OWpdphOwEnUjutb5Z3RyvJY0CJym1Rsvhu5n4N/ImY5y9:u9D9SUdvuAm16kpmz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Main/Main.exe

Files

Main.rar
.rar

Password: 2024
Main/Instruction.txt
Main/Main.exe
.exe windows:4 windows x86 arch:x86

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\d8evl1xj9zy\obj\Release\QQf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Main/dll/vcruntime40.dll