Static task
static1
General
-
Target
ABNORMAL RED FREE VERSION.rar
-
Size
3.3MB
-
MD5
683662aafdffed92b5db4fc07655ec43
-
SHA1
a311eb98e1a9b541a77891c3358d95579cd9ee95
-
SHA256
4d89e023a44a1e500fffc48396064f7c74b3c5a586ff30191da30ec7e414d0c9
-
SHA512
a67b88a7d436c324b0a32b3fdd0c3d7a8b2741aa42909aa7ec19d67c860d4a041fce84755f37a5d92ca1f5644e9e4305f8d72799f437c79104a5a268653f2286
-
SSDEEP
98304:1rarF7qdhpXD5/UfD/8EcPBnZ4HII/eI51kB5wpHzT+ynlmR:1raRe7tRyra8II/v5Jp+ylu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ABNORMAL RED FREE VERSION/Windows Modules Installer.exe
Files
-
ABNORMAL RED FREE VERSION.rar.rar
Password: 2024
-
ABNORMAL RED FREE VERSION/Windows Modules Installer.exe.exe windows:4 windows x64 arch:x64
Password: 2024
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
&NgPjZ_ Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
&NgPjZ_ Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ