AC[.]zip | Triage™

General

Target
AC.zip
Size 15KB
Sample260728-jnvb2sstft
SHA256 35bbcc57c1acb185c378d0370f0b27a5b61dd9ea3f63659f8560d882d6d6eea5
MD5 79fb4946a6d1151e1909bd372939b34b
SHA1 a833cf9a308192d00dc19e64357c322ba22da94a
SHA512 070c472774ba4b2de46a1895c232d8eaf50db15caaf8298303a025c0ebc611dae3c10dc22768b5c3f070ace5fa0583d54296b403f9e0f822063b5a07b6d002f3
SSDEEP 384:Tp+ZBEtCyrpnJ2RaAyTr3rgpL13W4x00qwtzgJuoXe4:F+gt9rCUAAT2L1x00qwtEug9
TLSH
T14C72D1B24F916603DCBC51F38889AE343E35CF763404B944EC9A9F7118286A17B6B749
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AC/ACmenu.exe

File Explorer

AC.zip

.zip 15KB
AC/ACmenu.bat

464B
AC/ACmenu.cs

.js 22KB
AC/ACmenu.exe

.exe 21KB

AC.zip

SHA256 35bbcc57c1acb185c378d0370f0b27a5b61dd9ea3f63659f8560d882d6d6eea5
MD5 79fb4946a6d1151e1909bd372939b34b
SHA1 a833cf9a308192d00dc19e64357c322ba22da94a
SHA512 070c472774ba4b2de46a1895c232d8eaf50db15caaf8298303a025c0ebc611dae3c10dc22768b5c3f070ace5fa0583d54296b403f9e0f822063b5a07b6d002f3
SSDEEP 384:Tp+ZBEtCyrpnJ2RaAyTr3rgpL13W4x00qwtzgJuoXe4:F+gt9rCUAAT2L1x00qwtEug9
TLSH
T14C72D1B24F916603DCBC51F38889AE343E35CF763404B944EC9A9F7118286A17B6B749
MD5 SHA1 SHA512 SSDEEP TLSH

AC/ACmenu.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 19e4719eca71af719f6e077aed500e6f4a0a0823fd0008333af9b526773d5ce1
MD5 93e82de3272a2d4ee258cfeaaf5a8b59
SHA1 0a81c3d9a71155e89091dc20a31b4ad399f0d325
SHA512 176dbfdeda5d0cad7de099a1422d0873d82ec923e9cd7589c36a15ea49616668fea409ba5ffa1d647673d14c4331b52cda5e5b3c0a6bd96c371230c2d7b37cbc
SSDEEP 384:7HVloLK7D7hWwX6IeEJLicIzDquyMnIjExYlsnZGAZdroCehkCcr:7wZEL4zHduliZZHCcr
TLSH
T16EA2B50073EC1618F1FF9FB41EBE01104B37B9AB4979C74E1AA9516D1A737908AA4F36
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

26990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

AC.zip

AC/ACmenu.bat

AC/ACmenu.cs

AC/ACmenu.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

AC.zip

AC/ACmenu.bat

AC/ACmenu.cs

AC/ACmenu.exe

mscoree

dotnet