PI[.]rar | Triage™

General

Target
PI.rar
Size 664KB
Sample230609-j6pvaacc91
SHA256 055df87ee17bc10f89a3ce80d670eaad3d3c747648d9aa95aa73c7165e9ceeb2
MD5 d9d1ad56f27d9857961fe2d9c3232709
SHA1 e8bf83ccbef6e3837e2f7992b353c29d2a05dd09
SHA512 0f28fcccdef0ef1a24cd1e4ff697d0a26795e9f6bd38af6b9d4e2ea0efd0e0d22e3f8193db9c33d4c530fda32a6d1f177d2d0b02e80f775aa13f280d4b4230dd
SSDEEP 12288:AzVU8HGj6aof0OlicePOvkK79SuucG0HJWTDC9oiKDskPyCI5Zy:A+ja8OlicOKZPDG0KDC9oiKk5Zy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PI.exe

File Explorer

PI.rar

.rar 664KB
PI.exe

.exe 749KB

PI.rar

SHA256 055df87ee17bc10f89a3ce80d670eaad3d3c747648d9aa95aa73c7165e9ceeb2
MD5 d9d1ad56f27d9857961fe2d9c3232709
SHA1 e8bf83ccbef6e3837e2f7992b353c29d2a05dd09
SHA512 0f28fcccdef0ef1a24cd1e4ff697d0a26795e9f6bd38af6b9d4e2ea0efd0e0d22e3f8193db9c33d4c530fda32a6d1f177d2d0b02e80f775aa13f280d4b4230dd
SSDEEP 12288:AzVU8HGj6aof0OlicePOvkK79SuucG0HJWTDC9oiKDskPyCI5Zy:A+ja8OlicOKZPDG0KDC9oiKk5Zy
MD5 SHA1 SHA512 SSDEEP

PI.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0cf35dee450f97c6292a678eec6cec2c682abe638925be45ab06d865bbc5a1bb
MD5 7845e18bd435dac2db3e03456a513471
SHA1 9a736efed39443d2615280239748a9db60491c6f
SHA512 52df9d81540bbc2099baca9318ec2b5f78ed615432d50b86f00985750775ec8101071f185901f460711337cd7cdc85557913dbaa1adfab974736356c1c265da4
SSDEEP 12288:Ag+J/M+Jhewx/NscEQ+vgXK1HsaPC+77jzk/+Ls59f20uPvqr/JEOmo/D+T6dQ4S:i/thewlqB6pbcC+I5920UvqDx/Da4G9R
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

762310

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing