Timberman_VS[.]zip

General

Target
Timberman_VS.zip
Size 21.8MB
Sample260425-3d871aay21
SHA256 9a751ae8284dc561660d2915b794e2756415405ceea3cc8df0711adefb590896
MD5 1e4b990ecbb4cd4199aec2397a87396e
SHA1 89cc99bf779b7bc56e0d1dc1d893609ae38bc6f2
SHA512 6e16cff82ecf4ccbdf5b9d05e9f0c4546dcdc1525d04047e104a3fe412a27a943f523b126910082d2a13487a4de88a7f6c8098c1cee784947f420a51a62057be
SSDEEP 393216:MdIYNNJKCmNjDDrxANkjyv+HjLbdrYSLyjv2Z17Yc0EUOuqAeYkIy+lI8WM:sNyDnxgkmmHj9ByLm8c0avgyRxM
TLSH
T131373345E244A5F38DB79E026E01743458E5AA30671FE2E0320AE5E7FB76C1358DF2B9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Timberman VS.exe

File Explorer

Timberman_VS.zip

.zip 21.8MB
Timberman VS.exe

.exe 25.1MB

Timberman_VS.zip

SHA256 9a751ae8284dc561660d2915b794e2756415405ceea3cc8df0711adefb590896
MD5 1e4b990ecbb4cd4199aec2397a87396e
SHA1 89cc99bf779b7bc56e0d1dc1d893609ae38bc6f2
SHA512 6e16cff82ecf4ccbdf5b9d05e9f0c4546dcdc1525d04047e104a3fe412a27a943f523b126910082d2a13487a4de88a7f6c8098c1cee784947f420a51a62057be
SSDEEP 393216:MdIYNNJKCmNjDDrxANkjyv+HjLbdrYSLyjv2Z17Yc0EUOuqAeYkIy+lI8WM:sNyDnxgkmmHj9ByLm8c0avgyRxM
TLSH
T131373345E244A5F38DB79E026E01743458E5AA30671FE2E0320AE5E7FB76C1358DF2B9
MD5 SHA1 SHA512 SSDEEP TLSH

Timberman VS.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7e2458cfe24cb649c259bfd4993f8d9650ba086f99a225408111a37aa21f71d2
MD5 298759d9863879a080bdb0f10b634947
SHA1 e68509da202d00f5396a78ff9ad57333c23ccf82
SHA512 1447b44ce49794fa20ea35e5abda531468570395c70cc91ed890fcb5c867627a13fa64fb6cfc3a58606a3fc348fde4f6299a594a62f473206a454adcb58ed05e
SSDEEP 786432:FSgY6GZrzqKmTmb1zOKNQHNgoG49hwpgYZV/:FNgqKmab1kZ/BYZ
TLSH
T1C4472242A4C0E2A0FC7C8577B42758B90713FF7EED85B82920C8B21757FB1E15E69A19
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

26187230

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Jowita\documents\visual studio 2013\Projects\Minecraft 1.8.5\Minecraft 1.8.5\obj\Debug\Guide.pdb

Timberman_VS.zip

Timberman VS.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Timberman_VS.zip

Timberman VS.exe

mscoree

dotnet