TradingViewPRO-Unlimited [.]rar | Triage

Sharing

General

Target

TradingViewPRO-Unlimited .rar
Size

32KB
MD5

99aa5a7965d945e20d791818711bda77
SHA1

0a90dcffc6f19b1590261d2912b1e61440e1df92
SHA256

fc6004bd1c0e5fa19b08be45583a7fbc75f732df1467c722e8c52aa58ef1a9f1
SHA512

e98695b4f836ecdccbbf1389f3c0e94f5769f3913c87b1b80433a34a454d87983aace7a3db069b51826feacfb4f7348410096bdd226e42a24992870417619aa0
SSDEEP

768:G2fpJTY5xBVckkOb9Dq/dwF9F+2rZvmWf+QrrDginKYb/f8:BTYdVcPOb9DqVO9F+2dvm2vgiKYj8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Setup/SoftWareGX.exe

Files

TradingViewPRO-Unlimited .rar
.rar

Password: Pa$$$w0RD@$$@$$$
Setup.rar
.rar

Password: Pa$$$w0RD@$$@$$$
Setup/Client SDK/ODBC/170/License Terms/License_msodbcsql_ENU.txt
Setup/DAC/bin/Redist_DACFramework.txt
Setup/DAC/bin/en/License_DACFx.txt
Setup/License Terms/License_SQLNCLI_ENU.txt
Setup/SoftWareGX.exe
.exe windows:4 windows x86 arch:x86

Password: Pa$$$w0RD@$$@$$$

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.1MB - Virtual size: 10.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ