General

  • Target

    bas.zip

  • Size

    276KB

  • MD5

    9ee907ce0827e250f4d2b2be64330fe2

  • SHA1

    b74b5cac43e6c08e854e960eefea95518831c8e7

  • SHA256

    ff43952b85c65af3af8b64e1e4038f0e067585973f197d29e349737524c850f3

  • SHA512

    04dbeaf71cdceff3e99f26781f52d4dd36f1c85677cb0d665e48bd6f80feb70964d6c621c1d0c624de5023bcdbf4956de9ebe302e8613ae74dcda168151d003b

  • SSDEEP

    6144:brUp05mrypHlDrHtBk9nQLokAZ+mZavy6g0C2pUK7BWW6mDL6uxX:brGfrWDrHte5QLt/+Iyf05pUwBWW9v6I

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bas.zip
    .zip .ps1 polyglot
  • Debug/ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Debug/bas.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Debug/bas.exe.config
  • Debug/bas.pdb
  • Debug/syntax/lua.xshd
    .xml