app[.]exe | Triage™

General

Target
app.exe
Size 353KB
Sample240409-qaccmsff65
SHA256 29f8b50f737feef9ec7439780daead395bf2bf278a4540ddffe64ca70aa9f462
MD5 4a78707180195f7584386470809e4aec
SHA1 0bc190b0cbb3983ce1b0bf7f5efa4a6f14955a78
SHA512 785a0635bd215c67eefd23ad57b2193745220646bb58434d0d526e34d10560b6e8b43fbd23641d1632995ce311d820a439fc0733048e55c04baab2dbb8981b7a
SSDEEP 6144:Iu4ypBt/6bC6p/8jJkJaVnQUKRnazBrRYJs3mb2stMK39V8s98ix2p:Iu1t/6+6pWG8aRna9RYSQTXtV8s98E2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
app.exe

File Explorer

app.exe

.exe 353KB

app.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 29f8b50f737feef9ec7439780daead395bf2bf278a4540ddffe64ca70aa9f462
MD5 4a78707180195f7584386470809e4aec
SHA1 0bc190b0cbb3983ce1b0bf7f5efa4a6f14955a78
SHA512 785a0635bd215c67eefd23ad57b2193745220646bb58434d0d526e34d10560b6e8b43fbd23641d1632995ce311d820a439fc0733048e55c04baab2dbb8981b7a
SSDEEP 6144:Iu4ypBt/6bC6p/8jJkJaVnQUKRnazBrRYJs3mb2stMK39V8s98ix2p:Iu1t/6+6pWG8aRna9RYSQTXtV8s98E2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

343134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

app.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

app.exe

mscoree

dotnet