SHELL[.]exe | Triage™

General

Target
SHELL.exe
Size 48.6MB
Sample260623-xp2dmsfx2x
SHA256 7de2483d97a87d347b12c0efb2b9f8c7c736f55bf40b6372aaf9d8851f6f27db
MD5 f169933dd69d194d8f5addfcf9388542
SHA1 61cd57747adc030bae87ed2f6d5bebfd80fdafe1
SHA512 da2024f891a06c0dfaf86fd952717195d4a23867f3ccee7bf04234181fc9fb662c743eb3abc980d86d64021cb69a26aca659c847ffe93443233bba5c5f4a9dac
SSDEEP 12288:Iquze1wkjOIIKjgj3ukoSwJ27mAHpvxaFVakXgPpe1dj/+44nMWFxCLRaSfJ5D5i:C
TLSH
T1FBB7FCDEA71D56E90EDB37A8EB464963BE84A9350A74824FF7AF851FF00F81500F0916
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SHELL.exe

File Explorer

SHELL.exe

.exe 48.6MB

SHELL.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7de2483d97a87d347b12c0efb2b9f8c7c736f55bf40b6372aaf9d8851f6f27db
MD5 f169933dd69d194d8f5addfcf9388542
SHA1 61cd57747adc030bae87ed2f6d5bebfd80fdafe1
SHA512 da2024f891a06c0dfaf86fd952717195d4a23867f3ccee7bf04234181fc9fb662c743eb3abc980d86d64021cb69a26aca659c847ffe93443233bba5c5f4a9dac
SSDEEP 12288:Iquze1wkjOIIKjgj3ukoSwJ27mAHpvxaFVakXgPpe1dj/+44nMWFxCLRaSfJ5D5i:C
TLSH
T1FBB7FCDEA71D56E90EDB37A8EB464963BE84A9350A74824FF7AF851FF00F81500F0916
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

50936814

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

SHELL.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

SHELL.exe

mscoree

dotnet