Debug[.]zip | Triage™

General

Target
Debug.zip
Size 10KB
Sample240613-gmda2awfre
SHA256 1f393f3ad5aa1ed9185ffcbfbbf07cdb6526293eba918e1ddfc4b79ee4aae07b
MD5 5f392596ba7e1cd2a393fdf18b1a3d34
SHA1 5ef0783f4f9dbe2dc622555fb9326c2221ed8521
SHA512 3abd29d4c5b1e5923938fdd8b719aae1d66c56eca832b3b3232b4be268ccca43f54253afbbc726062a0ae667e973115c32957a46ed74ccb83bfb001f2cc09683
SSDEEP 192:R23B1eDhvwnqN8ac5HZAa382bN6I7k0KORQE7Z3HQQBX3S/KYHzEKG6CBG:Yx1emqN8z5HZlmYk/4Z5C/KYHojbBG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Debug/Test.exe

File Explorer

Debug.zip

.zip 10KB
Debug/Test.exe

.exe 11KB
Debug/Test.exe.config

1KB
Debug/Test.pdb

33KB

Debug.zip

SHA256 1f393f3ad5aa1ed9185ffcbfbbf07cdb6526293eba918e1ddfc4b79ee4aae07b
MD5 5f392596ba7e1cd2a393fdf18b1a3d34
SHA1 5ef0783f4f9dbe2dc622555fb9326c2221ed8521
SHA512 3abd29d4c5b1e5923938fdd8b719aae1d66c56eca832b3b3232b4be268ccca43f54253afbbc726062a0ae667e973115c32957a46ed74ccb83bfb001f2cc09683
SSDEEP 192:R23B1eDhvwnqN8ac5HZAa382bN6I7k0KORQE7Z3HQQBX3S/KYHzEKG6CBG:Yx1emqN8z5HZlmYk/4Z5C/KYHojbBG
MD5 SHA1 SHA512 SSDEEP

Debug/Test.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 954cf3ffdd63a06257dc51f24750cce0a8439022f5c3eff565979fe826ffe778
MD5 08bcf96bbdae7b29e1f2875a02c0fa99
SHA1 0622838f60f32cfb73beac3f27e3890bf34e0a9f
SHA512 9a907b86e094f792560dd62565929d0eef43c2a2b89a4467bfe55aebc8e7f35e15ee79e54c6986e431f209ece68be7eaeebe1b83835c985b78c2f20b611fd632
SSDEEP 192:Gmw0kEB9skCvZiXUyI1QSE0MWCYNThRIRXwCfJ8cnel1PKNVS4fWP:vqkCvuI17E0N1TzIRXwY8cnemNV5fW
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Rtehnik\source\repos\Test\Test\obj\Debug\Test.pdb

Debug.zip

Debug/Test.exe

mscoree

dotnet

Debug/Test.exe.config

Debug/Test.pdb

Sharing

General

Malware Config

Signatures

File Explorer

Debug.zip

Debug/Test.exe

mscoree

dotnet

Debug/Test.exe.config

Debug/Test.pdb