PEEKAPOO[.]rar | Triage™

General

Target
PEEKAPOO.rar
Size 913KB
Sample260818-rm1rfatekb
SHA256 bf6231ecf0ac1bc8b3b18557fe228fea15da8810f0507ad08313c8d4484877c8
MD5 07030d0c98dd94ae8d5ebd38127ab9b6
SHA1 376cb7ac78ab8c87b25f54c507353c2c9975cec5
SHA512 9af6e649ae1794d5696d76e09a1fc991fcd4a8c227ce1b5c8110c355ce73c1b19bf4928f82dae620ff518b234ee0daecb5cc6e9a6ab95b3f84ec28392e4fa4ec
SSDEEP 24576:ncBPGTz5oRIguN6I+rVWB2tOWFSDWh1RNpjDinuL4iPoH0+:n0P69M4Nt+It3Wh1bpj3ZwU+
TLSH
T1A815330016A88F438C2751F72C469532AA4B3706D745CE8B86E7FEE5AFE5F906BB6401
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PEEKAPOO/PEEKABOO.exe

File Explorer

PEEKAPOO.rar

.rar 913KB
PEEKAPOO/PEEKABOO.exe

.exe 921KB

PEEKAPOO.rar

SHA256 bf6231ecf0ac1bc8b3b18557fe228fea15da8810f0507ad08313c8d4484877c8
MD5 07030d0c98dd94ae8d5ebd38127ab9b6
SHA1 376cb7ac78ab8c87b25f54c507353c2c9975cec5
SHA512 9af6e649ae1794d5696d76e09a1fc991fcd4a8c227ce1b5c8110c355ce73c1b19bf4928f82dae620ff518b234ee0daecb5cc6e9a6ab95b3f84ec28392e4fa4ec
SSDEEP 24576:ncBPGTz5oRIguN6I+rVWB2tOWFSDWh1RNpjDinuL4iPoH0+:n0P69M4Nt+It3Wh1bpj3ZwU+
TLSH
T1A815330016A88F438C2751F72C469532AA4B3706D745CE8B86E7FEE5AFE5F906BB6401
MD5 SHA1 SHA512 SSDEEP TLSH

PEEKAPOO/PEEKABOO.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 deaf30953149d0bef45a11bd89f4ef69f77115e50380c7ef3607c37ff4f40a1d
MD5 03c3e9290329eec39c6543006f9ac9f1
SHA1 78e676fc850fb5d4e1c75b813f15b841fdf7705d
SHA512 b2c5b1b060a0349bc92cc5a8b286f149b5cf6b40264e7b613b76c911e4acc6352ed0fdd9d945fae9c025963cae02f3f2cbef8a62bff844764a66481119c6321d
SSDEEP 24576:QCFZOZHLhrN+f4SULfWyBPzB8JAk4cQATg:1F+LL+fIWybB8
TLSH
T13B15239832772A1FCCE72737E5E739A463AE323D0937229D04A5F37D1E415C05726AA2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

949118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

PEEKAPOO.rar

PEEKAPOO/PEEKABOO.exe

mscoree

dotnet

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

PEEKAPOO.rar

PEEKAPOO/PEEKABOO.exe

mscoree

dotnet