a[.]zip | Triage™

General

Target
a.zip
Size 3KB
Sample260417-sa76escy21
SHA256 a417a0be5f679d3aa22a1af38e89e8d7c7ad2739b7ebdfde6c9e3017e829da22
MD5 870fb445d1d06165764510abfad26807
SHA1 8b72c46e59c8d72216e9b52113130dbf3bbd3f35
SHA512 04527fc9e25d4038f973665d330247178f7dcf3e953c208d57b789858bb87abadd52ce3559e423998a82b529a7c98f932e9f999f83644523e9641d1114385ce3
TLSH
T126612B63CC00A441DA3A7EB4536FCA5797728408805DBCC64005B7927EE758314B67F2
MD5 SHA1 SHA512 TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/windows2/WindowsAcici.exe

File Explorer

a.zip

.zip 3KB
windows2/WindowsAcici.exe

.exe 4KB
windows2/app.manifest

.xml 390B
windows2/main.cs

1005B

a.zip

SHA256 a417a0be5f679d3aa22a1af38e89e8d7c7ad2739b7ebdfde6c9e3017e829da22
MD5 870fb445d1d06165764510abfad26807
SHA1 8b72c46e59c8d72216e9b52113130dbf3bbd3f35
SHA512 04527fc9e25d4038f973665d330247178f7dcf3e953c208d57b789858bb87abadd52ce3559e423998a82b529a7c98f932e9f999f83644523e9641d1114385ce3
TLSH
T126612B63CC00A441DA3A7EB4536FCA5797728408805DBCC64005B7927EE758314B67F2
MD5 SHA1 SHA512 TLSH

windows2/WindowsAcici.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 487bafa3373435b2e9dac009ffa62b5de7f62065e9326e48922b0d4290f1aac2
MD5 cc78f8692ff4fa90d725dee7dd30cf8a
SHA1 61bdd9444dc11aeee9b644e60e07f943c0a99c2f
SHA512 a141457512293435fc4a83ceef46fe8d73a964bad68bd790c1e6ea24cdae32f929de74130eb3df4c62803e42c55e4b7866f0898754ea37ff8223648d11da6f15
SSDEEP 48:6ls57hH8YlWrt+J0P1S1UpWi7mDpLd1hOulOd+Deq8SCS:t57hH8YlyfN6Ub+ddUd+D9C
TLSH
T12D91541597E84B6AF0FB0B3569B387061FB5F915AD32C34E6684031A9E217904D73BB1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

a.zip

windows2/WindowsAcici.exe

mscoree

dotnet

windows2/app.manifest

windows2/main.cs

Sharing

General

Malware Config

Signatures

File Explorer

a.zip

windows2/WindowsAcici.exe

mscoree

dotnet

windows2/app.manifest

windows2/main.cs