XZP-Tool-v2[.]0[.]rar

Target
XZP-Tool-v2.0.rar
Size 444KB
Sample260714-dce54acy5p
SHA256 23a8dbf02f2867a8714310598069c1907675e38257412e1a133c763a76d0903d
MD5 d06a42aca89c32237c85e55aed5535b1
SHA1 b09d171ca262a177aa61c83ac33e759a7fa0e108
SHA512 6488cdff7b8dd36f95f3c32eb9188189b15cfa45f225026ea39e2ec83d211b0d0c1c91fb60bbbb4de675f9f249861b5f47fdd4d32d510c296878c2b0e657f49f
SSDEEP 6144:S5aoWy2l39Ct9TxHkzBOG62L6TaYCayPYGps/kV5sLUMS9/7Z0o3xJiFtP:arLJHOOUXYCzPYGcLQ10Jz
TLSH
T144A423EEA096B9DB06B450184DE78CC5BA531582E5C8935CACF7E376837E4680B31DCB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned MSI 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XZP-Tool-v2.0/Setup.msi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XZP-Tool-v2.0/XzpTool 2.exe

File Explorer

XZP-Tool-v2.0.rar

.rar 444KB
XZP-Tool-v2.0/Setup.msi

.msi 698KB
XZP-Tool-v2.0/XzpTool 2.exe

.exe 374KB

XZP-Tool-v2.0.rar

SHA256 23a8dbf02f2867a8714310598069c1907675e38257412e1a133c763a76d0903d
MD5 d06a42aca89c32237c85e55aed5535b1
SHA1 b09d171ca262a177aa61c83ac33e759a7fa0e108
SHA512 6488cdff7b8dd36f95f3c32eb9188189b15cfa45f225026ea39e2ec83d211b0d0c1c91fb60bbbb4de675f9f249861b5f47fdd4d32d510c296878c2b0e657f49f
SSDEEP 6144:S5aoWy2l39Ct9TxHkzBOG62L6TaYCayPYGps/kV5sLUMS9/7Z0o3xJiFtP:arLJHOOUXYCzPYGcLQ10Jz
TLSH
T144A423EEA096B9DB06B450184DE78CC5BA531582E5C8935CACF7E376837E4680B31DCB
MD5 SHA1 SHA512 SSDEEP TLSH

XZP-Tool-v2.0/XzpTool 2.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ebd0e5e091384ac81574eade9d82639fed6ff060cacee7764ff44cbc6a74d7fa
MD5 b26f3eaf9aa03e94b27ad4f9abba113b
SHA1 3c13d946eaf548b84d3b5a3567d887ba80bd0f97
SHA512 7d947893c9b7a7e391569875d4f32a34beed0ef629387804bc985b6eff44f7189b2aa0dd73f0b6fd424f3ef60207d630edfee3cda96ed0115836e7e80c2815ef
SSDEEP 6144:VH+j2YrMMLZJmctUhMMUZVmMGH5w5SLmNk8U:VV2MMLZYgyMMUZ0w/
TLSH
T1C1845BC2B2900B33EC7A42F94973443107717DBAA501E6D99DC832AF0AF37529A56B5F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

321054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

XZP-Tool-v2.0.rar

XZP-Tool-v2.0/Setup.msi

XZP-Tool-v2.0/XzpTool 2.exe

mscoree

dotnet