Ares[.]zip | Triage™

General

Target
Ares.zip
Size 9.5MB
Sample240723-nc2zzatdql
SHA256 24fd25f7c29e38f8c0ca405d5d1ad01332e04f9f4de79cedcbade64eeeb4f81f
MD5 cdf6871fba9312dd250c6f67c1f0cc90
SHA1 f2f9e6808018244080928f1d3c4d772245b7a79b
SHA512 4d21bbf201a8b9f3acb95632a2cfab7cb7b152b1673f84a874e42211af07a879c4ec491a0592d40788aba8205948728498da510e953a39a4c685d54ecbbc4270
SSDEEP 196608:m8QQ+AZ/LGndV+mVQxsA1JfyS9CC2ntfAexjPI3aT2tLiz9Q:m8QS0dV3Qxs6JfCCKqWPIdey
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack003/ares/AnyDesk (ARES).exe

File Explorer

Ares.zip

.zip 9.5MB
Ares - Copia.zip

.zip 9.5MB
Ares - Copia - Copia.zip

.zip 9.5MB
ares/AnyDesk (ARES).exe

.exe 9.5MB

Ares.zip

SHA256 24fd25f7c29e38f8c0ca405d5d1ad01332e04f9f4de79cedcbade64eeeb4f81f
MD5 cdf6871fba9312dd250c6f67c1f0cc90
SHA1 f2f9e6808018244080928f1d3c4d772245b7a79b
SHA512 4d21bbf201a8b9f3acb95632a2cfab7cb7b152b1673f84a874e42211af07a879c4ec491a0592d40788aba8205948728498da510e953a39a4c685d54ecbbc4270
SSDEEP 196608:m8QQ+AZ/LGndV+mVQxsA1JfyS9CC2ntfAexjPI3aT2tLiz9Q:m8QS0dV3Qxs6JfCCKqWPIdey
MD5 SHA1 SHA512 SSDEEP

ares/AnyDesk (ARES).exe

SHA256 2fb6c7512ed9b1685c5af73f6875ca6f085add60ed3ae09f914a73e37d16defe
MD5 33b25341be43c3772804c2c202042ec7
SHA1 a4573a867e2cc0b7f0e9ddc9d7676aeb942f372b
SHA512 0b867f1d87043fdd3e99f3a0c5371d95debd208e28600420c69f1b0b3d24861c78c3f2611db8097484b2e98bb2cc3cc67cd9c30e69b35f03d3c5a3621fa9deba
SSDEEP 196608:CYQEuSzjBKnvBkWXCzEqRzFaubMeW3thIc3Pnk1atadP0xv:CYQOQvBbCzEQzvMe4gwnkbC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

Ares.zip

Ares - Copia.zip

Ares - Copia - Copia.zip

ares/AnyDesk (ARES).exe

generic