rookie_2[.]29[.]2_portable[.]zip

General

Target
rookie_2.29.2_portable.zip
Size 1.1MB
Sample240613-1cmaqs1apf
SHA256 fe3aec6d25aa75e3afcd67df5f56f22de04b14b036364fe7ecda68044197d239
MD5 6a03f66ff25270256a2269463a64da26
SHA1 9938c15825c124500f3c456df18687d53d7793b4
SHA512 f901ffffae3bbc591ec2c4b7d8896bcc6339e5a22777e1b08668560b146e71ec02dbc40d06b84ac51e3ccc7e1943957a2769a7830402755d28a843790a7560c9
SSDEEP 24576:YXwUNSjGlgq+G/VELltQUrG0cnyhjO76dz2F4OvnnlqsduARWtGfigl:YgUNS4gqZ7SjDq7i2H9HddRiGfis
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AndroidSideloader v2.29.2.exe

File Explorer

rookie_2.29.2_portable.zip

.zip 1.1MB
AndroidSideloader v2.29.2.exe

.exe 4.1MB

rookie_2.29.2_portable.zip

SHA256 fe3aec6d25aa75e3afcd67df5f56f22de04b14b036364fe7ecda68044197d239
MD5 6a03f66ff25270256a2269463a64da26
SHA1 9938c15825c124500f3c456df18687d53d7793b4
SHA512 f901ffffae3bbc591ec2c4b7d8896bcc6339e5a22777e1b08668560b146e71ec02dbc40d06b84ac51e3ccc7e1943957a2769a7830402755d28a843790a7560c9
SSDEEP 24576:YXwUNSjGlgq+G/VELltQUrG0cnyhjO76dz2F4OvnnlqsduARWtGfigl:YgUNS4gqZ7SjDq7i2H9HddRiGfis
MD5 SHA1 SHA512 SSDEEP

AndroidSideloader v2.29.2.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6cf2bcdb1a463fc69eddb125eba8cc12854ee23effcd7c65b968667c668a7f0b
MD5 b7fa8a83dd1c92d93679c58d06691369
SHA1 0cff7bb71ff43ee92172f30566d8ee1b043129fc
SHA512 d74f8450f1fda260d0176ceba347bde6ad58b24a09eaac3cc921e20236a11707cab2f5eaee3bb10907c387d67efbcb66d823ae052b1317f3e953c4984a2b94b8
SSDEEP 24576:JUjV//Ppn/JcDJ7bdukqjVnlqud+/2P+AXg:S5//Rn/QJ7bYkqXfd+/9AQ
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3906910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Sideloader\AndroidSideloader.pdb

rookie_2.29.2_portable.zip

AndroidSideloader v2.29.2.exe

mscoree

dotnet

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

rookie_2.29.2_portable.zip

AndroidSideloader v2.29.2.exe

mscoree

dotnet