54e1cc2a_[.]zip | Triage™

General

Target
54e1cc2a_.zip
Size 2.8MB
Sample260528-cdkarsds7n
SHA256 99dd76c769c30d1c6493197ab57eb242c3c275abf228096218ea37923c9e726e
MD5 b9b9baf79434640a6c3a846d4a805698
SHA1 49eb6cdb4765e37eec14afe1511af456712ca207
SHA512 672304fe4ab4219952fcd5890f6317fff0ec9e8c9a4ffbd7d228e06f2603ab920294d7401a35b1e011854a378f73f02bdaec8d61abd37e3396923cc438533f88
SSDEEP 49152:lIkXFL8NPGAb7W6Cn7uRkR0/MLJvjG+WxqrJdUBdP4hbQa+3XXZajMupaYg3zxgm:u8y6hUG0My2bQa+JUy9glc
TLSH
T187D533A8C85B4BE95AF7E1FDE16474363CEFE7B41584888D4A0634CD51AE2B8E90CC71
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/野外断手视频曝光.exe

File Explorer

54e1cc2a_.zip

.zip 2.8MB
野外断手视频曝光.exe

.exe 2.9MB

54e1cc2a_.zip

SHA256 99dd76c769c30d1c6493197ab57eb242c3c275abf228096218ea37923c9e726e
MD5 b9b9baf79434640a6c3a846d4a805698
SHA1 49eb6cdb4765e37eec14afe1511af456712ca207
SHA512 672304fe4ab4219952fcd5890f6317fff0ec9e8c9a4ffbd7d228e06f2603ab920294d7401a35b1e011854a378f73f02bdaec8d61abd37e3396923cc438533f88
SSDEEP 49152:lIkXFL8NPGAb7W6Cn7uRkR0/MLJvjG+WxqrJdUBdP4hbQa+3XXZajMupaYg3zxgm:u8y6hUG0My2bQa+JUy9glc
TLSH
T187D533A8C85B4BE95AF7E1FDE16474363CEFE7B41584888D4A0634CD51AE2B8E90CC71
MD5 SHA1 SHA512 SSDEEP TLSH

野外断手视频曝光.exe

IMPHASH 49b7e5a8b9534a50db8f8fb2b8ad7743
SHA256 9b5c1845fce6f0a8f3824b7af617bd6791bc89c532f5c4c1b81aabdad172a143
MD5 c639ee443f193da507eee3e5c380d20c
SHA1 e7129a995463376beee53c7f5ff607a3847d30af
SHA512 744ae6a745acb1c0796d9f3b6e197c6456c311ad29223a2bc730d06e8ad968043711ea2b1cd734624cba28a2db2cfd378e8dfec9e8f6ef1782244125f31ee4e3
SSDEEP 49152:1QRR7XgF/L4vNq6b7S6wZTuZ6R0/Mb3vhW+Whirv3UBlb4/hQastz7/alMap4igs:1QX7XsWWZeA0MmahQas1ssDmr
TLSH
T166E53366E19626F9DAB7817DD02025166BFBB57111A0CF9F0B00219E1EAB2B4ED1CF31
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

10468

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentProcess InitializeCriticalSectionEx WaitForSingleObject GetFileAttributesW Sleep GetTickCount64 GetLastError QueryPerformanceFrequency CloseHandle RaiseException GetProcAddress DeleteCriticalSection GetModuleHandleW QueryPerformanceCounter GetTickCount GetExitCodeProcess WriteConsoleW CreateFileW SetFilePointerEx GetSystemTimeAsFileTime IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapFree LCMapStringW GetFileType HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx

shell32

ShellExecuteExW

Sharing