media[.]rar | Triage™

General

Target
media.rar
Size 1.5MB
Sample260625-wv93asd16w
SHA256 0a0c881a1d8decbf6752a03dc77193d44a06b84216a4c3e5de7e8b4369f7efee
MD5 18d719e5f0f04de5e263ce695d571914
SHA1 978b5240a7f0595f8cbb4d34eddf407a8cb352f3
SHA512 2e589fc55601a603fc35b7c6647627cefaf3eeb1444cfcf752cd0d1680a767a0c923ed484cb41757cc651653856d99d81f6f9d885a3c614b4ffe36644b5dbab5
SSDEEP 49152:KEuiOr/F/fd/1nlVM8YjNsPWWt+Kb1dHlFCuxkbTr:KEuiOTFN/CodJhF2f
TLSH
T1A8753370F20ABA9C9CFFCDD8450D7212A520A1D418CEA5C264FB161DBD3B82A38F35D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/media.exe

File Explorer

media.rar

.rar 1.5MB
media.exe

.exe 8.1MB

media.rar

SHA256 0a0c881a1d8decbf6752a03dc77193d44a06b84216a4c3e5de7e8b4369f7efee
MD5 18d719e5f0f04de5e263ce695d571914
SHA1 978b5240a7f0595f8cbb4d34eddf407a8cb352f3
SHA512 2e589fc55601a603fc35b7c6647627cefaf3eeb1444cfcf752cd0d1680a767a0c923ed484cb41757cc651653856d99d81f6f9d885a3c614b4ffe36644b5dbab5
SSDEEP 49152:KEuiOr/F/fd/1nlVM8YjNsPWWt+Kb1dHlFCuxkbTr:KEuiOTFN/CodJhF2f
TLSH
T1A8753370F20ABA9C9CFFCDD8450D7212A520A1D418CEA5C264FB161DBD3B82A38F35D9
MD5 SHA1 SHA512 SSDEEP TLSH

media.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b6c1215dea3423fe4317cbc36e87e4a688042ae1fedcd02f79d7db2e7a086c83
MD5 62d564121798d92a417c457a6110e7c1
SHA1 64455f011f737e630d0cf364c92d6683b282e8d8
SHA512 d074904361ac10919664eb3572df765a8272b5765823682fdc13dde3ff105b04a9983191d68f702f34b53fad8dc92afa2496efbfdfc12e569cf72482dd5d612e
SSDEEP 49152:QOmo9rsre29tR0lwzrlUztc3lq3leMzmblsg0zU1pmnnToAvAES:QOB2U
TLSH
T17886E514A466AF46E2BD17BB01E0628933F65103978EC29BEDD3B8DC3A51D4D4B4DC8B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8443998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

media.rar

media.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

media.rar

media.exe

mscoree

dotnet