details[.]zip | Triage™

General

Target
details.zip
Size 151KB
Sample250120-sdx5mavnhm
SHA256 b786587b42153d12d46a0a16f16eef56de64b4f45f2d0fb2643c039f0ec4ffb4
MD5 5404cdd3646700f0bc569e34eac9a4de
SHA1 e05f73c26aa58c9f6f21a85934c08880c2ac2445
SHA512 9244c994d9f8df7cf89d74d7b667e652d5ba485eede258f75ec29a9da6366f7d103182d508e3ef1e3ad600ba7d7e92dd3358c05d2950fc425e930ef980502fde
SSDEEP 3072:iPsTW1P7b4YfrOc2iPTrXtTyIh7Zo1CdYY4kJDdqL1mRngyF+W/vD:9C4EicbrrdTB4Ct9D8op/FvD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/details.exe

File Explorer

details.zip

.zip 151KB
details.exe

.exe 227KB

details.zip

SHA256 b786587b42153d12d46a0a16f16eef56de64b4f45f2d0fb2643c039f0ec4ffb4
MD5 5404cdd3646700f0bc569e34eac9a4de
SHA1 e05f73c26aa58c9f6f21a85934c08880c2ac2445
SHA512 9244c994d9f8df7cf89d74d7b667e652d5ba485eede258f75ec29a9da6366f7d103182d508e3ef1e3ad600ba7d7e92dd3358c05d2950fc425e930ef980502fde
SSDEEP 3072:iPsTW1P7b4YfrOc2iPTrXtTyIh7Zo1CdYY4kJDdqL1mRngyF+W/vD:9C4EicbrrdTB4Ct9D8op/FvD
MD5 SHA1 SHA512 SSDEEP

details.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 245d6e944fbc242830eeed866951a0136b675131308193f37f4563f650b950f8
MD5 bd31e5caf4377d30f89e9deb7c4e108d
SHA1 baf724a78ffe06065aea496a534cb064527afb3e
SHA512 48331047209716849bf456c6e0697a4ccd4bb2661def1c8bc40652ce7ab615c7c4e726c0dd18b48494ea21fdc09cfdafaf9ac764dd33ff3787ed7084b8d99d0e
SSDEEP 6144:qbBfEoWgoE6k04rdAJ8lITRaxx2oxSduLtjstYPyXJ+:QzWgoE6k04ZAiqTRaxxZSELtjAK6J
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

238094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

details.zip

details.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

details.zip

details.exe

mscoree

dotnet