72106fac6f73c73139d35a9c475876aef1444a0366cb9e7c5040e4bdce5bdf7e[.]zip

General

Target
72106fac6f73c73139d35a9c475876aef1444a0366cb9e7c5040e4bdce5bdf7e.zip
Size 630KB
Sample241116-kkyqqstamd
SHA256 72106fac6f73c73139d35a9c475876aef1444a0366cb9e7c5040e4bdce5bdf7e
MD5 83f6f783b21e15a70128f79c7e6ed162
SHA1 93c4158f3e8714f5c1d2f45380a8ac7991375cba
SHA512 907a7a8c436bbf8af50e1e054456fd5c035a1b9d29a1d9fd290d8d5f8e68a30876490e7cc4513c6d8e2829b7d2522eacf8197d8e000448ef6114adc48a92b8aa
SSDEEP 12288:F5N7yhVOviZedZx0ht9geW/ykJZhVrV3TPW9FSVc/gCijDf54wznmq4:BGhU0EAtKe/2rVxDPWGc/7MB4w/4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New Tooling CT240230231CTA240714.exe

File Explorer

72106fac6f73c73139d35a9c475876aef1444a0366cb9e7c5040e4bdce5bdf7e.zip

.zip 630KB
New Tooling CT240230231CTA240714.exe

.exe 2.6MB

72106fac6f73c73139d35a9c475876aef1444a0366cb9e7c5040e4bdce5bdf7e.zip

SHA256 72106fac6f73c73139d35a9c475876aef1444a0366cb9e7c5040e4bdce5bdf7e
MD5 83f6f783b21e15a70128f79c7e6ed162
SHA1 93c4158f3e8714f5c1d2f45380a8ac7991375cba
SHA512 907a7a8c436bbf8af50e1e054456fd5c035a1b9d29a1d9fd290d8d5f8e68a30876490e7cc4513c6d8e2829b7d2522eacf8197d8e000448ef6114adc48a92b8aa
SSDEEP 12288:F5N7yhVOviZedZx0ht9geW/ykJZhVrV3TPW9FSVc/gCijDf54wznmq4:BGhU0EAtKe/2rVxDPWGc/7MB4w/4
MD5 SHA1 SHA512 SSDEEP

New Tooling CT240230231CTA240714.exe

SHA256 db54f10f4f1c3eae171d83065364f5482d76c048daae934da0279506c9169802
MD5 084dcc77f2015db12169837b93e13430
SHA1 3b239c71274c55e342f71ce2c13057c3cdb9ca2d
SHA512 b14e10288c109b3ebf6166fd1974e1d81289925c3bac5f8bf5eda589ef65ffa5ffb16f18a307b1f721091d49c8cc0c03cc2017d0400899f0cedc20326153e57e
SSDEEP 12288:KP7r9r/+ppppppppppppppppppppppppppppp0GMVOLiZedZ/0dt9geW/iwJZxVi:K1qMK0EctKeVqfVxtXWmI/7khqw/he
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing