20e80836ccec4b5c1557344e00898686cb8fc04020ca4bc0607fcf09854530af

General

Target
20e80836ccec4b5c1557344e00898686cb8fc04020ca4bc0607fcf09854530af
Size 997KB
Sample260703-k3e2caet6y
SHA256 20e80836ccec4b5c1557344e00898686cb8fc04020ca4bc0607fcf09854530af
MD5 36c7ec68d7e50c21b7e0908496e81dac
SHA1 a5e1a30b6aeaab58bbadc4bc58bdbfdc3734f39e
SHA512 2f9b9893ad2bbfb381e51565d7e17f910907718649cf3e1beee49c1c37641df29cc5148ebe88b60ac64bcbc4cd24ff373d5663ad0cc9e554773b57b55867d89e
SSDEEP 24576:brikOZJIl2x3efMZLq5TUgrSj2yeEJHc1PW9oKJZ4:bBOZJIw1FZGBUuSZ/saj4
TLSH
T17C25331E310196983AF77DB00E8FA7ED48DC01212542E52F83E54E7FE22AE95F665C27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/inv- sparrow.bat

File Explorer

20e80836ccec4b5c1557344e00898686cb8fc04020ca4bc0607fcf09854530af

.zip 997KB
inv- sparrow.bat

.exe 1.1MB

20e80836ccec4b5c1557344e00898686cb8fc04020ca4bc0607fcf09854530af

SHA256 20e80836ccec4b5c1557344e00898686cb8fc04020ca4bc0607fcf09854530af
MD5 36c7ec68d7e50c21b7e0908496e81dac
SHA1 a5e1a30b6aeaab58bbadc4bc58bdbfdc3734f39e
SHA512 2f9b9893ad2bbfb381e51565d7e17f910907718649cf3e1beee49c1c37641df29cc5148ebe88b60ac64bcbc4cd24ff373d5663ad0cc9e554773b57b55867d89e
SSDEEP 24576:brikOZJIl2x3efMZLq5TUgrSj2yeEJHc1PW9oKJZ4:bBOZJIw1FZGBUuSZ/saj4
TLSH
T17C25331E310196983AF77DB00E8FA7ED48DC01212542E52F83E54E7FE22AE95F665C27
MD5 SHA1 SHA512 SSDEEP TLSH

inv- sparrow.bat

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4689fc1a2f096c3b725320d37b7c48c12de7af97fded356def810a5868ea3dae
MD5 0e99f5e6f0d5f6dd357f6eb9bf1bbcd9
SHA1 6efe22279e4935ee4d5043279cc549b971317949
SHA512 e8f26ee49b5405f907f72aaeb916bbc82c44d2914056f7db1a9e369cfc4bb181b6a877d33d1ce51a84df0d9cf5b79a8d71ea146e12d220748964c129769fc7d7
SSDEEP 24576:2ZkYeJa6l1L5PAfMDda/HiC54jSEe8JTEXPuji7YRK5D33:2ZgDXLZnDQvi64dhqf7YRYn
TLSH
T1003512093349DD05D5E30FB01EA4E3B806B95E95A962D3138FFBACEBB62E745B440391
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1099878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Administrator\Desktop\Client\Temp\aVkzjDJedY\src\obj\Debug\mOey.pdb

20e80836ccec4b5c1557344e00898686cb8fc04020ca4bc0607fcf09854530af

inv- sparrow.bat

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

20e80836ccec4b5c1557344e00898686cb8fc04020ca4bc0607fcf09854530af

inv- sparrow.bat

mscoree

dotnet