RebelCracked[.]exe (4)[.]zip | Triage

Sharing

General

Target

RebelCracked.exe (4).zip
Size

12.0MB
MD5

1afa2f49b83bb818d424156625e3d768
SHA1

5faf0956e5db86b0f6cf1c8f198e26ab61bf1115
SHA256

6e22fdba6ddc3dd0b9f6b087d5ebb5aba3ac6f13251f3d834872539323ea5513
SHA512

1d1af9ca48f6323a5b424f2404b46bbc88feb7cac9b1b0e6a5d07ef7928f00802ebda653b20a0be05d5d58c2c5425a0ce9e61385b3976e6c023619772e0b5b1d
SSDEEP

196608:Mu+z7XoGn58ux3tDSt7EBFp+x2Ks5CRNc7gQ6sUpJEDfMmDLDy:Mu+z7XoGnRx3tDSNGp+PFrEDz/y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RebelCracked.exe.bin

Files

RebelCracked.exe (4).zip
.zip

Password: infected
RebelCracked.exe.bin
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.0MB - Virtual size: 12.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ