Ehtcyzwj[.]zip | Triage™

General

Target
Ehtcyzwj.zip
Size 75KB
Sample260804-d4ptlscd45
SHA256 ecf96da0af35a91999fdfe6ae76d2f7ec5b9583ddf06bd39ee4c4721038084ef
MD5 0f757047d3655b9dfac505de26a75769
SHA1 1e21cbb760174f93dfbcc0f25fd06e1463819154
SHA512 bc2e58db1aae0f4ae5b97ef02ad384d335301428c300549b639905f8ffed3efea4488eecc8066614fef932d3b67284ba632beb1159a7961285049159f39839ad
SSDEEP 1536:lnQN3A+9VOJge2Lbh1WnMH/DXXj2qEFf/DGcUJIfQ4owm4:lYbVOJybhEnM7nj2ldkeQV4
TLSH
T1AF7302DB345AEE80D6DD948E95341401CB3ED86858006CEA6DBC5FECFC4ADA7319C36A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ehtcyzwj.dll

File Explorer

Ehtcyzwj.zip

.zip 75KB
Ehtcyzwj.dll

.dll 145KB

Ehtcyzwj.zip

SHA256 ecf96da0af35a91999fdfe6ae76d2f7ec5b9583ddf06bd39ee4c4721038084ef
MD5 0f757047d3655b9dfac505de26a75769
SHA1 1e21cbb760174f93dfbcc0f25fd06e1463819154
SHA512 bc2e58db1aae0f4ae5b97ef02ad384d335301428c300549b639905f8ffed3efea4488eecc8066614fef932d3b67284ba632beb1159a7961285049159f39839ad
SSDEEP 1536:lnQN3A+9VOJge2Lbh1WnMH/DXXj2qEFf/DGcUJIfQ4owm4:lYbVOJybhEnM7nj2ldkeQV4
TLSH
T1AF7302DB345AEE80D6DD948E95341401CB3ED86858006CEA6DBC5FECFC4ADA7319C36A
MD5 SHA1 SHA512 SSDEEP TLSH

Ehtcyzwj.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 01c3dcfe6734bed6d165a0c4e74b0ad7bf71e2384b6991049c33cf0909afb649
MD5 794b146229c854860fda17e7d04b7383
SHA1 91345d7676cd399ba0c80948d155fd28ff7b6dd6
SHA512 148ac481f810e5a52fa6d921646d32e564759fe3e15690a34ada5bb83b058e7b033368ccbdcf5b589c5af9a7437636c95f4b8045857728ac451c688786e37e33
SSDEEP 3072:C1xKFQKkj6gZhbBN44wfjZ0XisAPKL/HEGtryM2bS8ys/qTj3igmH:wuQuPKL/HEXM2bn9
TLSH
T1EFE3293E73DA9E09C66C1AB6D0E3822417F1915A7B73DB6A7FC835E41D023603D0979A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

155118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Ehtcyzwj.zip

Ehtcyzwj.dll

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Ehtcyzwj.zip

Ehtcyzwj.dll

mscoree

dotnet