123[.]zip | Triage™

General

Target
123.zip
Size 148KB
Sample240613-xcaedssamr
SHA256 c4f57bf722feeacbdc555775e57e7495c1cb69cee743f7dc1a4a0c38bd182c99
MD5 8b0e9d359ac2bbefb7415954993000ba
SHA1 241e9f6e6936a03468652a114b01ab2f5d6d4bac
SHA512 ad38dd0cf03a3ea7980330ade7b9bbfb8f3931691ea3e3fd98a871a29edc06a1ed23d3172025c0671ed2d96a49bd830e29ae83f440640df04ea3c731ab0962ea
SSDEEP 3072:a79vTNMCAO6X8/gIStCGNzDSFvLo0y0XTkNWWSHgSkFAxnGYxz:a79vCCw6gISspNaugH6x
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/123.exe

File Explorer

123.zip

.zip 148KB
123.exe

.exe 177KB

123.zip

SHA256 c4f57bf722feeacbdc555775e57e7495c1cb69cee743f7dc1a4a0c38bd182c99
MD5 8b0e9d359ac2bbefb7415954993000ba
SHA1 241e9f6e6936a03468652a114b01ab2f5d6d4bac
SHA512 ad38dd0cf03a3ea7980330ade7b9bbfb8f3931691ea3e3fd98a871a29edc06a1ed23d3172025c0671ed2d96a49bd830e29ae83f440640df04ea3c731ab0962ea
SSDEEP 3072:a79vTNMCAO6X8/gIStCGNzDSFvLo0y0XTkNWWSHgSkFAxnGYxz:a79vCCw6gISspNaugH6x
MD5 SHA1 SHA512 SSDEEP

Password

malware

123.exe

IMPHASH 3d8d7beb5fc06d08585103c361dc4565
SHA256 ef6980603136ffa42aebd6b9bfa864fe5223fa09c505bd80b386ee253a979aa7
MD5 1c6d8a7bdefb2f70231a828ca1daf719
SHA1 b2b603da28b8c4f7ecac7a4e3c128445f52de44c
SHA512 746661c8ec3839767021a2ef9354c8a8912d416ad529b508b2b1a62836b282c609f04b3c510dcdcf7f02a19f373ea12cb9f458349cd960bc4fd492f8a849b54b
SSDEEP 3072:pMIh6Eu+LSTBHyz68HNah3KQbruhFSU+ag9BdUkqaORiQ/x/5tJ4jjyB/v7:pMR+yHyz68tapxuhFS6g9vUl/Ri4nAjq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

106496

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.cs

Size

512B

Virtual Size

157B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

21KB

Virtual Size

526KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

123.zip

123.exe

kernel32

user32

comctl32

msvcrt

generic

Sharing

General

Malware Config

Signatures

File Explorer

123.zip

123.exe

kernel32

user32

comctl32

msvcrt

generic