Test[.]zip | Triage™

General

Target
Test.zip
Size 10KB
Sample240613-gp93sa1alk
SHA256 b7a437f02db2254c5dd16c4165df3b6b5b144ab1aab4f2ecc99313da48c991ad
MD5 19e3835823969fd0ed087eebd04cab7a
SHA1 dacee3fd9b01c4e7bff09ae7cd6a72fd8aac146d
SHA512 e05b758e0f8a56563a1c768259493e98c55d19c3e9bf5586055a82db0559ab39cfadf471ee4c4f21c1db9ea6cc1ea702cfd65298c0e303024636055a84353f7c
SSDEEP 192:NNqjnpBfC1lh36yYAoKDbD2wrhNAU2vIgfYnLccMl7R:NupBybTzDO8NAdgOYLDO1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Debug/Test.exe

File Explorer

Test.zip

.zip 10KB
Debug/Test.exe

.exe 11KB
Debug/Test.exe.config

1KB
Debug/Test.pdb

33KB

Test.zip

SHA256 b7a437f02db2254c5dd16c4165df3b6b5b144ab1aab4f2ecc99313da48c991ad
MD5 19e3835823969fd0ed087eebd04cab7a
SHA1 dacee3fd9b01c4e7bff09ae7cd6a72fd8aac146d
SHA512 e05b758e0f8a56563a1c768259493e98c55d19c3e9bf5586055a82db0559ab39cfadf471ee4c4f21c1db9ea6cc1ea702cfd65298c0e303024636055a84353f7c
SSDEEP 192:NNqjnpBfC1lh36yYAoKDbD2wrhNAU2vIgfYnLccMl7R:NupBybTzDO8NAdgOYLDO1
MD5 SHA1 SHA512 SSDEEP

Debug/Test.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1bf1580067a8cafc50cef563e0d8dd67bf2dc05fe2e80d6fbd128f5edfdeb7e3
MD5 402f5639459e1c13766d51d19e6370b2
SHA1 823647508643e6f576d2700f331714114a6f4655
SHA512 9e96e1a16fd98a5503df55d35d81f45085eb196e1a607487f2932ec60f6ac749d3e1236f506a35c2c61553c858a48b8468d8b2456728e46bebf02587ba7d4ccd
SSDEEP 192:0mwGo2B9skCvZiXUyIBqkST0MWCYNThRIRXwCfJ8cnel1PKyrVS4fo+P:hqkCvuIBqfT0N1TzIRXwY8cnemyrV5fN
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Rtehnik\source\repos\Test\Test\obj\Debug\Test.pdb

Test.zip

Debug/Test.exe

mscoree

dotnet

Debug/Test.exe.config

Debug/Test.pdb

Sharing

General

Malware Config

Signatures

File Explorer

Test.zip

Debug/Test.exe

mscoree

dotnet

Debug/Test.exe.config

Debug/Test.pdb