RebelCracked[.]exe (2)[.]zip | Triage

Sharing

General

Target

RebelCracked.exe (2).zip
Size

12.0MB
MD5

83029ff3cfbc877f6c9c8fc458f7e1dd
SHA1

c099aae6ce3c388638da76e27f189b1e7c67d650
SHA256

220b99b44790e2507a8ec4a818a84e16a4447518a07ed225b438e800f53a2bbb
SHA512

d0bae9958f35be31d2be6d43da2102949f1ece0d08c2a0af63ab0cff53122c7acbcbe46ec16d789ea35ac941ca365081577da7034a3109a0a3485b91c05cdcaa
SSDEEP

196608:9VHpkAk4I9OkxVE73lCfOsbxCGfQyy7HAAPuwMA0mbTOVOJzdIoihKpexqjR2Ntm:PyB4tk87lCGsxcDMAPPVDoOJp8KpexqH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/RebelCracked.exe.bin

Files

RebelCracked.exe (2).zip
.zip

Password: infected
RebelCracked.exe.bin
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.0MB - Virtual size: 12.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ