Documents[.]cab | Triage™

General

Target
Documents.cab
Size 27KB
Sample220628-n86b9sbba9
SHA256 5cc4dd5ffee97ebffb2022cef577072a6414e5f98a65b5954edd260a698f6a1e
MD5 9572e7f2a3acc1e251d788e361c7ed8a
SHA1 1448b0aa3a59c0609c3a28cc05ac7ad3873bf6ea
SHA512 e30fe2141f0293cc702719c45b95341ac2df6294c983501e2dbefa15c3e746e00cf68d7f1ba7c6d888ceb53ea65f0a75c55672fe8e45365e3ab8f6ea9a8b3e6b
SSDEEP 768:JJ+WDmnVfFjyuBWTaWFNeCVpWBARFgsmHIa1kKIA:ZDm7jATa+XrWMFh4I5K3
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

Documents.cab

.cab 27KB
Documents.img

.iso 228KB
Xysdzxaxq.exe

.exe 177KB

Documents.cab

SHA256 5cc4dd5ffee97ebffb2022cef577072a6414e5f98a65b5954edd260a698f6a1e
MD5 9572e7f2a3acc1e251d788e361c7ed8a
SHA1 1448b0aa3a59c0609c3a28cc05ac7ad3873bf6ea
SHA512 e30fe2141f0293cc702719c45b95341ac2df6294c983501e2dbefa15c3e746e00cf68d7f1ba7c6d888ceb53ea65f0a75c55672fe8e45365e3ab8f6ea9a8b3e6b
SSDEEP 768:JJ+WDmnVfFjyuBWTaWFNeCVpWBARFgsmHIa1kKIA:ZDm7jATa+XrWMFh4I5K3
MD5 SHA1 SHA512 SSDEEP

Xysdzxaxq.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3eb2d6af1ef1c20fcb3887616aad430942beae25e637034110e9b5e9179e6b6b
MD5 83b5dfc150e08ef069b00ac265782cf1
SHA1 a2e45608e4ec82cba86ffce9c2d910e4a1877e6c
SHA512 3c5b3945d44b02b92423a0dba851c1d1688a41c6e3b316e0a0285336a02769718c9e7c6c6db318f8ad58ea2fe70cdc2c4285ee471052e92e00c1e56265f5ef3b
SSDEEP 3072:stzotb+tntGGzGtGGGlGtGGGGFGGtGGGGGqGGGtGGGGGGyGGGtGGGGGG+GGGtGGX:stz8qtntGGzGtGGGlGtGGGGFGGtGGGGg
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15874

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing