HyWare[.]7z | Triage™

General

Target
HyWare.7z
Size 10.6MB
Sample260208-pf446scv8a
SHA256 ebb91ee3e45b32065b1fd201bed7ec4d8e44e4fb15084fa36e531288b7b2ce89
MD5 ca8e0a9e0f1fab145313116279012410
SHA1 eb833590b5a1e5a3f198dd666cb8428583344639
SHA512 6cbc481594f297fb98f3149161c531ae6b82bd570f8be3fd5c9d8a0b81c9a69308adaa1f388715197e6b2f6731f4e68abc5cee265aa335c19310d45bfc32b8d0
SSDEEP 196608:GOBL7BVEfMPQ6EaUFGN4iGTtAWFI3c/dmsxChdR3yuLGcymGyfS3NkIwFeWYzwsP:G+M/ltFGNETJFbcsxSdRbAwS9Q2P
TLSH
T141B633127D0B666D92E9CCEF258582338BE3096E71F665D7902CFC3E9E174E71217228
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HyWare/HyWare.exe

File Explorer

HyWare.7z

.7z 10.6MB
HyWare/HyWare.exe

.exe 10.6MB

HyWare.7z

SHA256 ebb91ee3e45b32065b1fd201bed7ec4d8e44e4fb15084fa36e531288b7b2ce89
MD5 ca8e0a9e0f1fab145313116279012410
SHA1 eb833590b5a1e5a3f198dd666cb8428583344639
SHA512 6cbc481594f297fb98f3149161c531ae6b82bd570f8be3fd5c9d8a0b81c9a69308adaa1f388715197e6b2f6731f4e68abc5cee265aa335c19310d45bfc32b8d0
SSDEEP 196608:GOBL7BVEfMPQ6EaUFGN4iGTtAWFI3c/dmsxChdR3yuLGcymGyfS3NkIwFeWYzwsP:G+M/ltFGNETJFbcsxSdRbAwS9Q2P
TLSH
T141B633127D0B666D92E9CCEF258582338BE3096E71F665D7902CFC3E9E174E71217228
MD5 SHA1 SHA512 SSDEEP TLSH

Password

4444

HyWare/HyWare.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e371777001c7b434b11ece921db891918fbb157a8bdbb2e145d0260f1a94c7f5
MD5 550d5b5e0cb9ae1673d13e2599a917e4
SHA1 689cd3c151c814f089ea79083b2d6923419d6635
SHA512 57967b068399a2f6a07d19689cc1f3047734dc24177cb9800f223708e1ae954415bfdddac927ba7abd5450c46012720c97822359f801576be12b7b2db6a6aee8
SSDEEP 196608:GAnpmffCskacbmT9QQCcWIFaisZdrHGRMa3wTTPN5OY4735Kkedo:G4pWfCocbmTVC7IHITPV5OxpKTd
TLSH
T10CB6011F1CD0066B8699E9FFF0D638376A260994E012AFB65C80838352CAEBD55D17F7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

4444

Minor OS version

0

Major OS version

4

Entry point

10850974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

HyWare.7z

HyWare/HyWare.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

HyWare.7z

HyWare/HyWare.exe

mscoree

dotnet