Fix[.]rar | Triage

Sharing

General

Target

Fix.rar
Size

1.1MB
MD5

79d93f3b6efa0981f746360e64786feb
SHA1

9d41b8b60b98625768f9ffd84d8db09dc0ce05da
SHA256

223525225eeb249f37887e5e31182c9aefbcc66384a577e2948aa84b55152177
SHA512

b5c63719671b29baf211e32aa0447c202695b70fa90dc347f5c20b6f3193eeb1d61f6b0cd3bb4cef457cc7031286f82625cbe1a6a10b0d64bd9f47761dc43b63
SSDEEP

24576:+6MCdPG4or73FRONTVpG/4Ztijt6W50oRFrx8jPnyY:xK4o/36TVAgZtMRRJxYPyY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EPM v14 Activator v1.1 - De!.exe

Files

Fix.rar
.rar
EPM v14 Activator v1.1 - De!.exe
.exe windows:5 windows x86 arch:x86

9868070df9cabf86070839c17858f024

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

GetClassInfoW

advapi32

RegSaveKeyW

comctl32

ImageList_GetImageInfo

Sections

.didata
Size: - Virtual size: 3.2MB

IMAGE_SCN_MEM_READ

.ctors
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 394KB - Virtual size: 750KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Professional_FLU.reg
Server_FLU.reg
Technician_FLU.reg
Unlimited_FLU.reg
readme.txt