radioams[.]zip | Triage™

General

Target
radioams.zip
Size 42KB
Sample260730-pl2agahd95
SHA256 fe18d8cf77650d67bdedaac08e5a43dbbd01c461eb3ae10588360f4e229dfa11
MD5 89e7231e367ee02bde198f5dc0ef2cbb
SHA1 534f54f78aa9164fbb5424350a87e0125dd160b9
SHA512 4708adac0cc5cf6c9ed97e0df15c517bf8d5b7f76673eaebf3e9f976732609a90a473dab5185e49118794998add3c34b002976f39022169bda8eceddfc5d5917
SSDEEP 768:kz71Bb1yL/p4ekxaEjHT/jR2OZqIB+Tp4Cvu6+kZxBVL:m71+Lp4TaMQYMTp4Cm6D
TLSH
T1211302A445C463F3D2546FB4AA057EB4243B026F06D6214B423F8BB532E74B7119EEE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/radioamsamples.exe

File Explorer

radioams.zip

.zip 42KB
radioamsamples.exe

.exe 47KB
read_me.txt

1KB

radioams.zip

SHA256 fe18d8cf77650d67bdedaac08e5a43dbbd01c461eb3ae10588360f4e229dfa11
MD5 89e7231e367ee02bde198f5dc0ef2cbb
SHA1 534f54f78aa9164fbb5424350a87e0125dd160b9
SHA512 4708adac0cc5cf6c9ed97e0df15c517bf8d5b7f76673eaebf3e9f976732609a90a473dab5185e49118794998add3c34b002976f39022169bda8eceddfc5d5917
SSDEEP 768:kz71Bb1yL/p4ekxaEjHT/jR2OZqIB+Tp4Cvu6+kZxBVL:m71+Lp4TaMQYMTp4Cm6D
TLSH
T1211302A445C463F3D2546FB4AA057EB4243B026F06D6214B423F8BB532E74B7119EEE6
MD5 SHA1 SHA512 SSDEEP TLSH

radioamsamples.exe

SHA256 4e635cc3b6b966cb5c0d91136e2db17e5200b45b290b34df586a9b2235c9eff1
MD5 4357a4c866b5b05b52a51fce46770522
SHA1 24e9f044419244df706b16ba6dff3abdd2b711a4
SHA512 f2a624e1bf3c4ad4123ee86d3ac9785054086e3505f03f253894af7bf1ebdbeedf80adbcbf48ffc7c92d916704c98e30c3e062e2e344889c6999a3ef2cdc4f12
SSDEEP 768:y+Ez6dnM7oxJLStkoWibgeqjULmoWPkmoeaA7FSK2vMwaE7o3ZI7zWa///7Y:HEmdn3DOtHhqj6u0r7EZI7zvX0
TLSH
T10B23E086AF488A09F06C5C32778B2D5635176E61E614A0B7029F3BC13F7572C71E32A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

44722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

40KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

512B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

radioams.zip

radioamsamples.exe

generic

read_me.txt