5[.]rar | Triage™

General

Target
5.rar
Size 2.7MB
Sample260910-qy4f2athpe
SHA256 988667f9c3fd4258d702beb5de770a1c61e73b6a3b7a331f85406992472faadd
MD5 caf3ca23c42dbd814271e00b0684931c
SHA1 7419b46d0429750ea7778dfd3e48756f17178dba
SHA512 db4e8f7799deced2e2382753a678ddc639ab12321510bbd2b633a05fa7f89c5e0cfe3c853ac557dd8f887db9177900f5bb4273fb53c4449f8cdac65a0e9eb750
SSDEEP 49152:W+TMm5tO1RDwFsOoC114ssJL2fGnRezvi56bER/U7l05PJvPDaSjtDIm:f4m5tDFs811sJLCGTK+/E0dHJIm
TLSH
T1CFD53337A256536C6772E487264EFE6B82F06D43CCF8996052E5B8A74170D0339B2E73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ORDER H306116.scr

File Explorer

5.rar

.rar 2.7MB
ORDER H306116.scr

.exe 2.8MB

5.rar

SHA256 988667f9c3fd4258d702beb5de770a1c61e73b6a3b7a331f85406992472faadd
MD5 caf3ca23c42dbd814271e00b0684931c
SHA1 7419b46d0429750ea7778dfd3e48756f17178dba
SHA512 db4e8f7799deced2e2382753a678ddc639ab12321510bbd2b633a05fa7f89c5e0cfe3c853ac557dd8f887db9177900f5bb4273fb53c4449f8cdac65a0e9eb750
SSDEEP 49152:W+TMm5tO1RDwFsOoC114ssJL2fGnRezvi56bER/U7l05PJvPDaSjtDIm:f4m5tDFs811sJLCGTK+/E0dHJIm
TLSH
T1CFD53337A256536C6772E487264EFE6B82F06D43CCF8996052E5B8A74170D0339B2E73
MD5 SHA1 SHA512 SSDEEP TLSH

ORDER H306116.scr

SHA256 ed51a8723dfafd4df5c7c967ad6e597a7e9d0bbc8c58e0419c5be98688b59924
MD5 4823a94d01ba71fbbdf088223ba2362a
SHA1 dae32a4c05e67252246d7126444623b0a7e6eaea
SHA512 8f2b1eec43b27040648bb8de18c2ff167050fc94cbbe70dab343071a089bf5332f481292feec7a2a9a61c44c4070aafe932e4f40bdf080caffdecef15ebb53b1
SSDEEP 49152:zn8gQENn8aVPxXreWbDHnDGqRweXSWXTueuSqzG7vFdkOX9dp3EauaFMu:zn8gQEeaVpXreWbGKJiWXTuDSSedkOXc
TLSH
T11CD523581617E203C5A993B40B62F2752B7A2EFAB110D3578EE97CEF7635F120D08653
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing