12092024_0031_11092024_P24002603[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12092024_0031_11092024_P24002603.rar
Size

1.6MB
MD5

5a05c5b0cd552deaf80a30f865c7b05f
SHA1

146202fd41264ea9cb0d835a57a062288c952ee8
SHA256

62f10bbf9dc5be2c90e8ea459775c453f6fcb91a7568345b807a8615a85caafc
SHA512

2b1bff98c05c45b3fe2ac684879ae31b8e943160e9e2edcfc8ea0207a5c61b884162ca240ad9ec9d20d34b918e9ab517cfe7f7fb00f5151319cbaae4dea78c4f
SSDEEP

49152:qVU2WI8me1ddBkQxWwcC4F/BAWJpubNvnSy2M:qSPm8ddBK7ZeWJsNvMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/P24002603.exe

Files

12092024_0031_11092024_P24002603.rar
.rar

Password: infected
P24002603.img
.iso

Password: infected
P24002603.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ