conf[.]exe | Triage™

General

Target
conf.exe
Size 6.0MB
Sample260720-p85amsc19x
SHA256 db6ab3a42131bb24be34abbde57bdc3e3b189b7e9801a3e4e30c7304367fd507
MD5 af859b6ba2f4b4316b9afda3659d5d9b
SHA1 9e3838e5853c833ad923689f76606ab367bd85cd
SHA512 1e721bbe7d48a4f1ec7e1384a406dfd297a06aaffd0e8367f4c9732042b19e9b103e69d39df18a99eaa4925a9deff04ed2f16146c2cae4472fe3ea4e6691573c
SSDEEP 98304:+FWAf2wVDrS2Zm2e/yXwRYhTex8JZbBZ6mJy8TxijMkTMQKqp7U3Sk:gWO28RZmPyXweACdZFQ8TxV+HJgSk
TLSH
T1185633EC3651BACDDDA3E4328DA51C60E6712EBF1317CB2B9613515AD85EDDACE000B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
conf.exe

File Explorer

conf.exe

.exe 6.0MB

conf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 db6ab3a42131bb24be34abbde57bdc3e3b189b7e9801a3e4e30c7304367fd507
MD5 af859b6ba2f4b4316b9afda3659d5d9b
SHA1 9e3838e5853c833ad923689f76606ab367bd85cd
SHA512 1e721bbe7d48a4f1ec7e1384a406dfd297a06aaffd0e8367f4c9732042b19e9b103e69d39df18a99eaa4925a9deff04ed2f16146c2cae4472fe3ea4e6691573c
SSDEEP 98304:+FWAf2wVDrS2Zm2e/yXwRYhTex8JZbBZ6mJy8TxijMkTMQKqp7U3Sk:gWO28RZmPyXweACdZFQ8TxV+HJgSk
TLSH
T1185633EC3651BACDDDA3E4328DA51C60E6712EBF1317CB2B9613515AD85EDDACE000B2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6266890

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

conf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

conf.exe

mscoree

dotnet