anonhax[.]rar | Triage™

General

Target
anonhax.rar
Size 7.9MB
Sample260728-g32csscn5w
SHA256 7b144362c494d15657b5961adc9ea215952e98dd9637a1db1b42c39eab11aab0
MD5 5088fe5e63b55efe34eb313e0792ebd4
SHA1 166a190639db09d8b6ee2fbd1d17b86526cf83df
SHA512 3b4ae3fa729b4cd6cfe386ac5ca1ad5ebabf8a89260acba2b68bbdfa8b6b5baf78a1dc069e3b72a7011596601b48c98f485093762f3bb5147422620fee2f8e68
SSDEEP 196608:Yuc1nphBpCqxuO9YpWdNiwmigt7YLRa75y/2J7r709r8Bvj46+U9dSnJ:YRXbpC0uJpWdNrtC5y/Qr70B8v0jU9QJ
TLSH
T1108633C46BF67D2FEE69E917990870F3EC810E90098BCA8D6E618476736C847F08F556
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/anonhax/anonhax.exe

File Explorer

anonhax.rar

.rar 7.9MB
anonhax/anonhax.exe

.exe 9.0MB

anonhax.rar

SHA256 7b144362c494d15657b5961adc9ea215952e98dd9637a1db1b42c39eab11aab0
MD5 5088fe5e63b55efe34eb313e0792ebd4
SHA1 166a190639db09d8b6ee2fbd1d17b86526cf83df
SHA512 3b4ae3fa729b4cd6cfe386ac5ca1ad5ebabf8a89260acba2b68bbdfa8b6b5baf78a1dc069e3b72a7011596601b48c98f485093762f3bb5147422620fee2f8e68
SSDEEP 196608:Yuc1nphBpCqxuO9YpWdNiwmigt7YLRa75y/2J7r709r8Bvj46+U9dSnJ:YRXbpC0uJpWdNrtC5y/Qr70B8v0jU9QJ
TLSH
T1108633C46BF67D2FEE69E917990870F3EC810E90098BCA8D6E618476736C847F08F556
MD5 SHA1 SHA512 SSDEEP TLSH

Password

anonhax

anonhax/anonhax.exe

IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
SHA256 7ca9f9ba89208e74c4895e338695764df1f523595d61f3de591efe0f38f8a2e2
MD5 e1dfc6cba8d13dc6a967438de6bf173c
SHA1 c970a0bd1a41e3ef7733a084bcb2b60eb8bc00f6
SHA512 fd63e3dc32edbfe3137a3223e16b7d6c4ed317bfead7c91cd208ab4719d6bd96533f6264246858945e3bfced7f50d1bb651e70718726baa9f516f1cd65d59722
SSDEEP 196608:kgbPsW7BPtxHP9vMB9BIW0i/YgBInAfQZw2O+xt/rlp:FbRFx14BHwgBInYmOIDlp
TLSH
T167962315C605C6B0FE13FFE46C562E3D5BE47623FFA5A722DC0A36A988A10A1D0F0576
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

anonhax

Minor OS version

0

Major OS version

4

Entry point

5237

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

anonhax.rar

anonhax/anonhax.exe

msvcrt

shell32

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

anonhax.rar

anonhax/anonhax.exe

msvcrt

shell32

kernel32

generic