NotScaryFile[.]rar | Triage

Sharing

General

Target

NotScaryFile.rar
Size

15.0MB
MD5

b8bf0843ebe241b26bed3860c60efc73
SHA1

1aac5609f43d051c6681f3baebca971a8338085d
SHA256

f9b46e6d9b70e52141aaa716168e8209f093a979d52b388db85d9cc34f604997
SHA512

f697109bffa8f9339cd5ab637276203712996cab94d13de0eb160822bf9ddabdf48c5603b67b0718c7571421ea2c39bc78ce5ef875db5d71cf923ace99ddfa4a
SSDEEP

393216:qGi/3JJwNBh4dkNJS6AaFwt0unCzhcobbMslHeu:q9ZaNESNJSBywt0uOhcoPlb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mandela.exe

Files

NotScaryFile.rar
.rar

Password: i_hate_jumpscares
Mandela.exe
.exe windows:4 windows x86 arch:x86

Password: i_hate_jumpscares

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Mandela.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.1MB - Virtual size: 15.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
README.txt