21[.]rar | Triage™

General

Target
21.rar
Size 281KB
Sample260812-nvpscstsds
SHA256 7d52535988939ef94c928fb96a1cc2d4b4bb540f95bfc507eaeb86506065012a
MD5 4caf0a19a659b8cc86b81a56932cc553
SHA1 88e46f0539557e5d36f6b0b9633711111923deda
SHA512 38553402f2aa47e46c6a1898038e55d8a396ab9381ff324bcc62877e3fdb2c0be09419656d19720b2b9069f99f335e158a08ae7daed8e91b48a20b26c005b002
SSDEEP 6144:uKNGVAmLSPlOTPjYkp06yIA8Z4igLENOFlUc+OppNA7bIGEYlIuONz6ZK:uKNGVzLSPgPjJp0PP+pXQCOcPEGO5UK
TLSH
T16C542324C0799D9D2B77A7D7E38C4D8A2084D9C82E31C0421E72D77B3967078D299B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bin/Debug/MatrixVirus.exe

File Explorer

21.rar

.rar 281KB
bin/Debug/MatrixVirus.exe

.exe 622KB
bin/Debug/MatrixVirus.pdb

39KB

21.rar

SHA256 7d52535988939ef94c928fb96a1cc2d4b4bb540f95bfc507eaeb86506065012a
MD5 4caf0a19a659b8cc86b81a56932cc553
SHA1 88e46f0539557e5d36f6b0b9633711111923deda
SHA512 38553402f2aa47e46c6a1898038e55d8a396ab9381ff324bcc62877e3fdb2c0be09419656d19720b2b9069f99f335e158a08ae7daed8e91b48a20b26c005b002
SSDEEP 6144:uKNGVAmLSPlOTPjYkp06yIA8Z4igLENOFlUc+OppNA7bIGEYlIuONz6ZK:uKNGVzLSPgPjJp0PP+pXQCOcPEGO5UK
TLSH
T16C542324C0799D9D2B77A7D7E38C4D8A2084D9C82E31C0421E72D77B3967078D299B7E
MD5 SHA1 SHA512 SSDEEP TLSH

bin/Debug/MatrixVirus.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 093d56ace5fd9d185dfa1d3eb48365b765b32e248b182358893ddae73402e0bc
MD5 c724a2e6fd6469c7e7724c49ef32b26c
SHA1 69ccd29c16bbabc331499c506b214b73c06bf09d
SHA512 a45c8ff381fa1e7662e3296fc343dcfc8a1d9bfc9a54bbe95da29abd0ab1a04ffe00c47ecd8a6379e8871080f2f253ee55f2ebeb86cee40c76f1388bd0088efa
SSDEEP 12288:ts6WC8NrwXwIkGJM5mo3Ax1xOWkkkcAbCkQPmjrDwHbAK09wmuyGYgnmU/KFQkf:9m3WwFbgkdu93zCp
TLSH
T10DD448343DEA502AB273EF698BE4789ADA6FB7733703645D1061038A4B23A41DED153D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

639410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\ft305\Desktop\Virus-ALL\SourceCodes\MatrixVirus\MatrixVirus\obj\Debug\MatrixVirus.pdb

21.rar

bin/Debug/MatrixVirus.exe

mscoree

dotnet

bin/Debug/MatrixVirus.pdb

Sharing

General

Malware Config

Signatures

File Explorer

21.rar

bin/Debug/MatrixVirus.exe

mscoree

dotnet

bin/Debug/MatrixVirus.pdb