Debug[.]rar | Triage™

General

Target
Debug.rar
Size 452KB
Sample260604-nhr2ysc19z
SHA256 549f89647006ccb9f7cc00f7b8894956c7106751adec7b443251306bfce24b33
MD5 fd959c729c4019d89079e3ed9c57819a
SHA1 3f6ca9c53b8a6085f9a4a13b0f8d614959d985ae
SHA512 8e1af07f07f703784c587b13270b56fc88df8dd62b720ac48e4c711fe994a19f6f455a95f91ce48732b48af6d1581aeb8635e67b2bc71199ceb84f1abc6aee90
SSDEEP 12288:QM2Iu0ZlBn/7cJWbV13ByaHVN8FWI42WFrgAq7:j2IDZlVoJAz9H38FWI4ZFsAq7
TLSH
T157A42394EAACFA11A74CD0F770B388960B1F83D9FC85293C896C6EB9346F7575E14092
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CREATIVE EAX.exe

File Explorer

Debug.rar

.rar 452KB
CREATIVE EAX.exe

.exe 611KB
IMG_3726.png

.png 52KB

Debug.rar

SHA256 549f89647006ccb9f7cc00f7b8894956c7106751adec7b443251306bfce24b33
MD5 fd959c729c4019d89079e3ed9c57819a
SHA1 3f6ca9c53b8a6085f9a4a13b0f8d614959d985ae
SHA512 8e1af07f07f703784c587b13270b56fc88df8dd62b720ac48e4c711fe994a19f6f455a95f91ce48732b48af6d1581aeb8635e67b2bc71199ceb84f1abc6aee90
SSDEEP 12288:QM2Iu0ZlBn/7cJWbV13ByaHVN8FWI42WFrgAq7:j2IDZlVoJAz9H38FWI4ZFsAq7
TLSH
T157A42394EAACFA11A74CD0F770B388960B1F83D9FC85293C896C6EB9346F7575E14092
MD5 SHA1 SHA512 SSDEEP TLSH

Password

1

CREATIVE EAX.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e5745ce74db57c2a2632cb49a0815ec6c562520c833a3b3aef70551d5cfd32ba
MD5 bfb430345a83701479f260d25f820ede
SHA1 4aa1dab0d6599dabdf6e96df2a125e15f923a6e3
SHA512 ec54cf30d80c19de23d19475531d2692a82f2e82ece1b81718d2b170f4434207ff011c6d697fdfa7bc2deebe370a5264fc21b3e05962d2a251cef2e2ec07a14d
SSDEEP 12288:0kkkkkkkk9c/o90KfC8moMuKQFde/Qe/s0KCBUXAikxIoBNtQ3qSanb0Kg:IqqFdOQOUw9Q34u
TLSH
T1A4D412D8AABAD310CF7F5BF48866AF1353F73A1754D1C24A98D258CEA753F011C82A46
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

1

Minor OS version

0

Major OS version

4

Entry point

572670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Debug.rar

CREATIVE EAX.exe

mscoree

dotnet

IMG_3726.png

Sharing

General

Malware Config

Signatures

File Explorer

Debug.rar

CREATIVE EAX.exe

mscoree

dotnet

IMG_3726.png