final[.]exe | Triage™

General

Target
final.exe
Size 4.0MB
Sample260720-15passfx6k
SHA256 43130766627d42c77b187aea1cb82a0e05e05f75e0c16f5d476224887f181222
MD5 e51e48759841b033a9bdf8a8eabf418f
SHA1 88607f58188aad38ffdddfbed8995ce66d37b0ac
SHA512 14a47d769e6bc275b62f52c0cc003df12c1de33cc2e2210e018af3245b9d6eec93b6e6bf8f353123597f2038fe49927458607e4748d90319f53d487066dffd72
SSDEEP 98304:eyavSXmlOfumAYx4NwVVIdhvf/UBHvuZ2UVJUVHx+heUmOeSh5Rcdw:eyDCUumAYaNi0hv0BHv8nJUuBmO5e
TLSH
T1E51633615D98A9E9E17C51F183750F0AF33FB3DD027E2257A42A3F7F692601C224EA19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
final.exe

File Explorer

final.exe

.exe 4.0MB

final.exe

SHA256 43130766627d42c77b187aea1cb82a0e05e05f75e0c16f5d476224887f181222
MD5 e51e48759841b033a9bdf8a8eabf418f
SHA1 88607f58188aad38ffdddfbed8995ce66d37b0ac
SHA512 14a47d769e6bc275b62f52c0cc003df12c1de33cc2e2210e018af3245b9d6eec93b6e6bf8f353123597f2038fe49927458607e4748d90319f53d487066dffd72
SSDEEP 98304:eyavSXmlOfumAYx4NwVVIdhvf/UBHvuZ2UVJUVHx+heUmOeSh5Rcdw:eyDCUumAYaNi0hv0BHv8nJUuBmO5e
TLSH
T1E51633615D98A9E9E17C51F183750F0AF33FB3DD027E2257A42A3F7F692601C224EA19
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8409176

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

Size

322KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

13KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.themida

Size

Virtual Size

5.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

final.exe

generic