peacemaker[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

peacemaker.rar
Size

188KB
MD5

d0bca9e0e097a9ab0c905ff36be9f64f
SHA1

fd7cf2469f36f5d946f29fa166a40aa38f0f0a28
SHA256

06676a9019cadee1792a53fe235ac21d37adc6dc327942e7a49ca7fc5426ce0d
SHA512

e2cd5f034f47412bd955cd07d91c1bab1c61ecfabba1afa00b3855c71a93c57ac454be15da907ce4d85990ca4b30bebeacf528a155573debc217c161c9901ff4
SSDEEP

3072:ITArKG9ZqkWAeWg4TwvxduAFKpPcYO+EnrBxVF6EX6PCJdRMhlsQhaF/P49p:IuVqku4TmcpUYTEnqEX6k4m4a9Q9p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/peacemaker.exe

Files

peacemaker.rar
.rar
peacemaker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 557KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ