toy[.]zip | Triage™

General

Target
toy.zip
Size 121KB
Sample260826-vnyv1sshmg
SHA256 6442fbe1f9d61caff33ca4ee4e119f85c7fd301ffb297bcf5f5edfe42289c34b
MD5 788f2e50b63d1cda19ca4131d0cc289b
SHA1 b7b89b9eb5942a1130d89c6857bb2cd772fdbe24
SHA512 102b148e2a5d72b38a3ff2a4828924bd84a66abb553b4ccf3887539dbb25b862830eb23c51a323020ceae9cc6eed42dc5143b0e40c0f647eebf76e9c38b3c6f2
SSDEEP 3072:qn1e6qXIRMKaFZgut7rHmTi2IOGjJmg1pXZ7LmpW:q1e6qXIReZb7KTi2IOGdp1pXZ7h
TLSH
T1C5C312A3EC9791DF510E98630EA9572FBD4D4EFD098DD8ADC8CC986E5CD8D0853049CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/toy.exe

File Explorer

toy.zip

.zip 121KB
toy.exe

.exe 210KB

toy.zip

SHA256 6442fbe1f9d61caff33ca4ee4e119f85c7fd301ffb297bcf5f5edfe42289c34b
MD5 788f2e50b63d1cda19ca4131d0cc289b
SHA1 b7b89b9eb5942a1130d89c6857bb2cd772fdbe24
SHA512 102b148e2a5d72b38a3ff2a4828924bd84a66abb553b4ccf3887539dbb25b862830eb23c51a323020ceae9cc6eed42dc5143b0e40c0f647eebf76e9c38b3c6f2
SSDEEP 3072:qn1e6qXIRMKaFZgut7rHmTi2IOGjJmg1pXZ7LmpW:q1e6qXIReZb7KTi2IOGdp1pXZ7h
TLSH
T1C5C312A3EC9791DF510E98630EA9572FBD4D4EFD098DD8ADC8CC986E5CD8D0853049CA
MD5 SHA1 SHA512 SSDEEP TLSH

toy.exe

IMPHASH 1beb64ec71120a905c4520f4e93c17b3
SHA256 6a1ce468a6f166c15bcfc6cf082784babab0586d4c4d35568bc40701789ca129
MD5 a14fca0579a28c5ecab72d05edf78d92
SHA1 efca358faa699c70e7e0e739737df428912bb076
SHA512 c401ddd15428fbb145746db8201c30a6e1e72b2260e6f767ba22178434e112083b3fa185443400ecb6886ab7448b4579b05b32ddb4ff8fe55f1c59bdafa962c8
SSDEEP 3072:BjlxQW7GFrYYYnvVc5Blud0SPe8HFWyRL1V3mTI2IOGjJmgDpvP2s4rjCN3:BUWEjLme8HFWcCTI2IOGdpDpB4S
TLSH
T18F247CC2E285EDD4D97945708433CE650BABACAD98A46B2F11D8B52A3DB13C3313BD47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

6620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

toy.zip

toy.exe

kernel32

user32

gdi32

shell32

advapi32

generic

Sharing

General

Malware Config

Signatures

File Explorer

toy.zip

toy.exe

kernel32

user32

gdi32

shell32

advapi32

generic