rust (1)[.]rar | Triage™

General

Target
rust (1).rar
Size 30KB
Sample260818-2c1c2attf1
SHA256 fb3e19966ac310d74bb504df9db5138a1ac95942fec31bbfd700334ce4c88ed2
MD5 45eb9e461706d6f1e2fe598d932a62f9
SHA1 99c26fb9395a0be694e351370fac112cdc47472c
SHA512 725d61f4b892706e97ec5f5f3f994ea525b1e7af9a19ddc9f7a7ac35e5b27f0879dbee1268cd822c62fa4c9e707b0be4d39f9104d8cd7169204ae1544dc14b7c
SSDEEP 384:fOpARnQ6cjEEy/xg/9T14X5Lv8Y5E3W/O4NMQVFN/M/7udobQby/7XfXZ0w:pnDyymr4GUZMQDddojfX/
TLSH
T134D2F1E7DCD351AE67105904D84759AE63839563EFA6846BD8D08E98E3E02302CE72BC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/External.exe

File Explorer

rust (1).rar

.rar 30KB
External.exe

.exe 100KB

rust (1).rar

SHA256 fb3e19966ac310d74bb504df9db5138a1ac95942fec31bbfd700334ce4c88ed2
MD5 45eb9e461706d6f1e2fe598d932a62f9
SHA1 99c26fb9395a0be694e351370fac112cdc47472c
SHA512 725d61f4b892706e97ec5f5f3f994ea525b1e7af9a19ddc9f7a7ac35e5b27f0879dbee1268cd822c62fa4c9e707b0be4d39f9104d8cd7169204ae1544dc14b7c
SSDEEP 384:fOpARnQ6cjEEy/xg/9T14X5Lv8Y5E3W/O4NMQVFN/M/7udobQby/7XfXZ0w:pnDyymr4GUZMQDddojfX/
TLSH
T134D2F1E7DCD351AE67105904D84759AE63839563EFA6846BD8D08E98E3E02302CE72BC
MD5 SHA1 SHA512 SSDEEP TLSH

Password

inf

External.exe

IMPHASH 20c55d66e9ef9cc9de77a7f537597372
SHA256 fce64904f0f461b8dfa4dccaff6073fcf957a01b32cf22f5a876d096a8b654fa
MD5 cde46288e3bf76015cc14cc012ed6bf5
SHA1 4d2a95a1ec1edb955904fb7eca29e68f75aaf435
SHA512 050248e6df2c40afccd6501db1bec50e57cf1b1a373bca5269a7bf80427b41643f2aed453612678c7e4ca8df35f3b5d6f37506d892338ab4ae1e0cc94f5c32bf
SSDEEP 1536:BRRHaYGfZp3otdUrPtHxpTMnlYgE7YkVJQ5TNvycOTS5DFsBOpQtKc2CyeoDk5bH:9c675DyqFRjiA8C2SniN3
TLSH
T135A30809E9A2246EC397C03ACE462545EEA07C5987581EFB63C18EB64CF19A47F3D713
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

inf

Minor OS version

0

Major OS version

6

Entry point

79808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __current_exception __current_exception_context memmove __C_specific_handler memset __std_exception_destroy memcpy __std_exception_copy memcmp __std_terminate

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode _callnewh free

api-ms-win-crt-string-l1-1-0

strlen isdigit isxdigit

api-ms-win-crt-convert-l1-1-0

wcstombs strtol

api-ms-win-crt-runtime-l1-1-0

_get_narrow_winmain_command_line _initterm _initterm_e exit _exit _seh_filter_exe _c_exit _register_thread_local_exe_atexit_callback _cexit _crt_atexit terminate _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _set_app_type _errno

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

GetCurrentThreadId SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId

Sharing