P24002603[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

P24002603.rar
Size

1.6MB
MD5

b0cd4dddb1cf5893c48aa4701e016201
SHA1

7428237bd5b814482f75b8ddff3dbdbb2286f089
SHA256

b909e6851cd7d6da303f853355c80ed04d6ce1b55599b4b829e9893c1b42b8db
SHA512

b9a6f54fcc0705f868375a10c20ba4ff811be56f15270c9f8b0b34e6e006e1c90efad409f54989bfca5abd74890e38fae108324faafcd24d7f3c968ffad71ea9
SSDEEP

24576:HAiwt6yQFWEqvqnq3J5yQxxPl6pTKEQYGGMTLRXBP4RpheX+1QuSAdyOx8+Wz6WL:3w4UvqqZ5yGx9eTQ2MTFBwRf9axH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/s.exe

Files

P24002603.rar
.rar
P24002603.iso
.iso
s.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ