AYReport_EN[.]exe | Triage™

Resubmissions

20/10/2023, 03:43

231020-eabkkafc2610

13/10/2023, 23:22

231013-3ckg9agf2310

Sharing

Copy URL Twitter E-mail

General

Target
AYReport_EN.exe
Size 9.6MB
Sample231020-eabkkafc26
SHA256 bde2b977cdd7c086a35825a9ba7f2307341a3917f40cc193ed316dde106a6c74
MD5 ec333982af0977d8af5a4984792a4385
SHA1 d5b7e49c6476766d45a18cdd150d0679a9529a5a
SHA512 1446ecc9ca6f193796cdbaf1b9f291b85a36279659254e6cbf286dba8a0e5f233c889b459b799a0d18462f1210841a61a207f76bc90db4365a43e7d967761cfc
SSDEEP 49152:LLLjKXCrX+hMesdq40bf95X9K5NRcSJDg/u/fiGhG6E7/6bp1pBt0zKkevwN/+j:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AYReport_EN.exe

File Explorer

AYReport_EN.exe

.exe 9.6MB

AYReport_EN.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 bde2b977cdd7c086a35825a9ba7f2307341a3917f40cc193ed316dde106a6c74
MD5 ec333982af0977d8af5a4984792a4385
SHA1 d5b7e49c6476766d45a18cdd150d0679a9529a5a
SHA512 1446ecc9ca6f193796cdbaf1b9f291b85a36279659254e6cbf286dba8a0e5f233c889b459b799a0d18462f1210841a61a207f76bc90db4365a43e7d967761cfc
SSDEEP 49152:LLLjKXCrX+hMesdq40bf95X9K5NRcSJDg/u/fiGhG6E7/6bp1pBt0zKkevwN/+j:
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10045806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

AYReport_EN.exe

mscoree

dotnet