Cliente2[.]zip | Triage™

General

Target
Cliente2.zip
Size 158KB
Sample230927-vhdynace71
SHA256 4be4cabcb5275bec2c52e54948d170e11f80f0b7533b861cefc3b9a0d4a15f3e
MD5 7f29033d6dfdb95db6ec90d33c752f7e
SHA1 19bc64d5cbba2fe28bb2f262534aebc0c2d8702c
SHA512 3a317a9abda1795d7028f928d2677eb9dcc09f8fd4688b3ac78a1b21f8d730106a7db3a01e4f089a7a19220e12afd3da3e71ee636bc0e7179bc93e640ca9199e
SSDEEP 3072:gtpWiuX76JKRwiVcVKEup96IFDKbC78kViC+/SBtEJVa/PKujPE2v4m:hz+JKSImFODpAkVy/SH6Va/CujP9v
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/client.exe

File Explorer

Cliente2.zip

.zip 158KB
client.exe

.exe 267KB

Cliente2.zip

SHA256 4be4cabcb5275bec2c52e54948d170e11f80f0b7533b861cefc3b9a0d4a15f3e
MD5 7f29033d6dfdb95db6ec90d33c752f7e
SHA1 19bc64d5cbba2fe28bb2f262534aebc0c2d8702c
SHA512 3a317a9abda1795d7028f928d2677eb9dcc09f8fd4688b3ac78a1b21f8d730106a7db3a01e4f089a7a19220e12afd3da3e71ee636bc0e7179bc93e640ca9199e
SSDEEP 3072:gtpWiuX76JKRwiVcVKEup96IFDKbC78kViC+/SBtEJVa/PKujPE2v4m:hz+JKSImFODpAkVy/SH6Va/CujP9v
MD5 SHA1 SHA512 SSDEEP

client.exe

IMPHASH c979a88e8595d029726dd8a9185ca5bc
SHA256 5633a46c25aced4b07728fd437b92c5e9102eabaa134ac584e2aae2e0adce587
MD5 5a84945991cf24c957cf67fd414c9f9a
SHA1 06206df47fd0805d616f31b5e56daa6378409e72
SHA512 307f16d760c0adbeb829705e6db167c460c7d048da56049a8240c6cf6de69c2e6f41fcb9cca7c2e2ee03b8b5cbe8132f346fc3626c39e7f4de6c6d0cbfce2ed2
SSDEEP 6144:ZWO3FffE31kwsQODpAkVyakH7bWMxNTf:EOFf8lDsQsVyaOP5
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

20753

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDriveStringsW GetSystemWindowsDirectoryW FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetNumberFormatA ReadConsoleW GetGeoInfoW GetDateFormatA ReadConsoleInputA GetThreadSelectorEntry AssignProcessToJobObject SizeofResource SetVolumeMountPointA GetProcessHandleCount HeapCreate TransactNamedPipe GetFileAttributesW IsDBCSLeadByte CreateFileW GetACP GetLastError SetLastError GetProcAddress VirtualAlloc BackupWrite InterlockedDecrement LoadLibraryA InterlockedExchangeAdd OpenWaitableTimerW WritePrivateProfileStringA CreateHardLinkW AddAtomW BeginUpdateResourceA SetConsoleWindowInfo GetCommMask OpenJobObjectW FoldStringW CreatePipe FindNextFileA GetShortPathNameW OpenSemaphoreW FindFirstVolumeA FindFirstVolumeW ReadConsoleOutputCharacterW LocalFileTimeToFileTime GetProcessHeap SetEndOfFile VirtualQuery EnumResourceNamesW GetTempFileNameA DebugActiveProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc RaiseException VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapSize RtlUnwind MultiByteToWideChar ReadFile InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleA SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage CloseHandle CreateFileA SetStdHandle GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

ChangeDisplaySettingsW LoadMenuA GetClassInfoExW GetScrollInfo CharToOemBuffW GetMessageExtraInfo

gdi32

SetColorAdjustment

advapi32

InitiateSystemShutdownA SetKernelObjectSecurity

Sharing