Debug[.]zip | Triage™

resource
unpack001/Debug/Ableisx.dll
unpack001/Debug/Alya-san.exe

Debug.zip

SHA256 3bbf9016933beb7a5b1a6bdd4bcdf54de712214940f187c3a223ef2385dfd749
MD5 2501ded0e18ccc54e6c892e3458dd5cd
SHA1 43a0705b9f5edae01fc38befa17f1e7890b8c4ae
SHA512 0e65c75f76a10b150af8039ace267029ea76865b7f7606e240c08102c24446e9cbb86b0c24862c65cf3899109c3c68cd4f6366998276d43cd8c7b9eb0f02010d
SSDEEP 393216:nZtm4/RjJy88Ud/B64L2atr3+GqtKoUZX2+nBAnM/3YCM3jJ9l3OU91N3Jb9A:O4ZjowxBj3+NKoUZX7BD3Gl3OKN3LA
TLSH
T172F6337164F1031FF764A238C99DE91E31B45D6B62340343A5DFE21FC2AAC5A8ADE253
MD5 SHA1 SHA512 SSDEEP TLSH

Password

grsgsreegssefaeaf

Debug/Ableisx.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 58a3e5901b139b273bc3ba42ec577991bee91d5a7474902eb0779f2a53beab5c
MD5 06bed964c83253bf2b6e7771d6ef3e91
SHA1 aa56ceb240d9c0cd084634fe2837cbf0800be7d7
SHA512 ccd9bea9a15ec5f16704ff3e05debe771260d8657f71830d41d970bb9d814a66d4463a62fc90c5fdea78d436714d06a63d9bfdff3d149eca511f580c7d7e66ca
SSDEEP 768:nZ8h/PbEUhuypH74j8bdbpeRMcvnfR78KaQ:aFz974jObpeRFvnfR7/R
TLSH
T195D2F500A7F99619FAFE6F36EDB264114B32BC6A5C62D70E09D4404E1832B85CFA1777
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

grsgsreegssefaeaf

Minor OS version

0

Major OS version

4

Entry point

35378

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\josea\Documents\UtilsMalware\Ableisx\obj\Debug\Ableisx.pdb

Debug/Ableisx.pdb

SHA256 3cfc3dac80e932adc633247a116cb5ce69f97d1378392faacde9ec2165dcfca4
MD5 e5bca3700b2bf83054c7c57705cf4282
SHA1 b28ab06eeb23c3699b6de305136b1fc96ff3b0c1
SHA512 48b9c7b583f31b07805e073166e251bf25ff4b31687e78ca975c8be41b480f35f20aef41cf4047e9f6ba13c6d140a239a6de669681bb63be2658c5a067ab6887
SSDEEP 768:wAismrsmop9Q1Bpm54lgSj+33Vaub7mGMXsBvxJSp9Q4OBB:JMBDgSj+nVzmGMXslxAOr
TLSH
T1D8336F1BB790C933C84686B957A78F0D5238EC809F57A7CB37A8B52D7CB33490D92258
MD5 SHA1 SHA512 SSDEEP TLSH

Debug/Alya-san.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4d45798d4a639b296e37244e4253c1e02563aeacbae98bdc9ed7d1d7968ecf0a
MD5 386feccefcbcbbb2c00e496fe14029ec
SHA1 5765e67c2769737bc3b0eb4c4cce1901913375f4
SHA512 2ea87a70b17de6778c19c0cc94b5f6f1e22178102a91fd74a8408072a86449c6518a99a1d2fd20975a644be12b70dcbaa1a18c6637a5712ae6b4b0c50d2857b3
SSDEEP 393216:nik9jcYb/1Pe39N3OQmRLs/yFnsQiWcYb/1Pe39N3OQmRJs/yFnsQ:ik9j1r1q3OJLs/y6S1r1q3OJJs/y6
TLSH
T1480723532BA36A9FE49420744437DF183A946E16598182733370FD3EEA76502BDFBE81
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

grsgsreegssefaeaf

Minor OS version

0

Major OS version

4

Entry point

17818978

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\josea\Documents\Alya-san\Alya-san\obj\Debug\Alya-san.pdb

Debug/Alya-san.exe.config

SHA256 c66e1ba36e874342cd570cf5bdd3d8b73864a4c9e9d802398be7f46fe39a8532
MD5 3f9b7c50015ca8be5ec84127bb37e2cb
SHA1 07fa0b2f00ba82a440bfeacafd8b0b8d1b3e4ee7
SHA512 db5713dda4ecac0a1201add7d5d1a55bdbfc9e373b2277661869f7de9e8ba593f44bdafa6c8dbeba09df158b2dfdd1875c26c047f50597185f1f2f5612fc87b9
TLSH
T104C08C5944A8BD278E334B235752C56AEFB073B3A424140CF02FEA660F3124D466737B
MD5 SHA1 SHA512 TLSH

Debug/Alya-san.pdb

SHA256 6f91efd974a5ab97e2c7accdee760614e15a9e044e66d5f29928dc1c953ff4c7
MD5 0cb1696012535f6fd5f3c296fa66398e
SHA1 f7b344338399b419b806e886f97eae25d1e13fb7
SHA512 937b63f852cc0736df22c7dc8c39949dcf9d45361e9e48728f03ddb5ed93304eea15cb036dbcd8153aa7a3df5e961e6d29361c47f0b1e4ad4b65b6c4987e8768
SSDEEP 3072:kjDtExjrJ6KcdiLDqPDZ7SLXX28JQ6x28JQwk:VcIcSRQ+RQ
TLSH
T1ED34B523BB48D433D459867416AB8F2D8334D994AF47978F27E9B42CBCE33161E92358
MD5 SHA1 SHA512 SSDEEP TLSH

Debug.zip

Debug/Ableisx.dll

mscoree

dotnet

Debug/Ableisx.pdb

Debug/Alya-san.exe

mscoree

dotnet

Debug/Alya-san.exe.config

Debug/Alya-san.pdb

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Debug.zip

Debug/Ableisx.dll

mscoree

dotnet

Debug/Ableisx.pdb

Debug/Alya-san.exe

mscoree

dotnet

Debug/Alya-san.exe.config

Debug/Alya-san.pdb