build_240222_175553[.]zip

General

Target
build_240222_175553.zip
Size 119KB
Sample240222-vfpmdacg2w
SHA256 c16a997e95c57b9ab1df7d0f3d8c2b292ab7cd15161fee7c5d33f6a4a0c7df15
MD5 f24116361370f9f61e66ac7944e1177e
SHA1 a060a3fdaeb66d6f43c8d7bbd80de07d40b1494e
SHA512 5fd270feb29209af81f0195e1c98d3ab6c25c8e1fa269ace3373febab96cd18502026f74cd7f57f0b9d84eeabfcd08603abe5588d25fb343f08cb0c2da0f0485
SSDEEP 3072:HZJk3Xzmeb8bXs0pvrZnx9zOw7VvsQR8UXf40l7W40yoC9o/xGI:5Jki+0pTxT7hs4UqEC9o/wI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/crypted810467741RBBOW.exe

File Explorer

build_240222_175553.zip

.zip 119KB
crypted810467741RBBOW.exe

.exe 130KB

build_240222_175553.zip

SHA256 c16a997e95c57b9ab1df7d0f3d8c2b292ab7cd15161fee7c5d33f6a4a0c7df15
MD5 f24116361370f9f61e66ac7944e1177e
SHA1 a060a3fdaeb66d6f43c8d7bbd80de07d40b1494e
SHA512 5fd270feb29209af81f0195e1c98d3ab6c25c8e1fa269ace3373febab96cd18502026f74cd7f57f0b9d84eeabfcd08603abe5588d25fb343f08cb0c2da0f0485
SSDEEP 3072:HZJk3Xzmeb8bXs0pvrZnx9zOw7VvsQR8UXf40l7W40yoC9o/xGI:5Jki+0pTxT7hs4UqEC9o/wI
MD5 SHA1 SHA512 SSDEEP

crypted810467741RBBOW.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 66a5e6a773ed1a4065bd281af893600a5c36643baba933d1539bbdbbcf20403f
MD5 a1152b8408343477e9c349e560d3036f
SHA1 0c6938468fe195de90e914303668a417df0b4c4a
SHA512 7a5edb3b699e243a1aa156431810c45c57a1b7824f892877f4ee1cd3485d289f38f875ebf9060675dbc7dd079ed909735e2dcad3ca3e7ee3c20cedccf2dac219
SSDEEP 3072:lFAzme58bXs0pvrznx9zOk7VvsQRsUXf40l7240yoC9o/r/r:py0pTrt7hs4EqMC9o/r
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

138718

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Portable.pdb

build_240222_175553.zip

crypted810467741RBBOW.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

build_240222_175553.zip

crypted810467741RBBOW.exe

mscoree

dotnet