Time[.]zip | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Time.zip
Size 105KB
Sample260930-ev749see32
SHA256 f5fd7750c893af2e8805bc5aef4541200272d043a22efb6b87c59a816ce905a8
MD5 2f53702cda1ef8bdc630a911fdf70310
SHA1 396702b9ace51343958673d2df2c17ee36a613ad
SHA512 904a243e5989732f48f564d48900a4275ae7bc3fa38f6537fdbb172ae1fa2939e3b08644470737a1205e499679d07958365cd80cbc27ded6faa4f210aaa844e8
SSDEEP 1536:IB8Lhb4gZkQrMQb6XFEs0hWFY39RhDqY1O8a2RDkHa8C4pRhYgyF/lgXuUJLinhD:fpyQr5mc6av1LRDclhYp9UZLeVTPmS
TLSH
T168B31232080B4912D01D1F4BEAE5E61922FBA1C3676B51CB293689F33DB9E4E05DD53E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Time.exe

File Explorer

Time.zip

.zip 105KB
Time.exe

.exe 111KB

Time.zip

SHA256 f5fd7750c893af2e8805bc5aef4541200272d043a22efb6b87c59a816ce905a8
MD5 2f53702cda1ef8bdc630a911fdf70310
SHA1 396702b9ace51343958673d2df2c17ee36a613ad
SHA512 904a243e5989732f48f564d48900a4275ae7bc3fa38f6537fdbb172ae1fa2939e3b08644470737a1205e499679d07958365cd80cbc27ded6faa4f210aaa844e8
SSDEEP 1536:IB8Lhb4gZkQrMQb6XFEs0hWFY39RhDqY1O8a2RDkHa8C4pRhYgyF/lgXuUJLinhD:fpyQr5mc6av1LRDclhYp9UZLeVTPmS
TLSH
T168B31232080B4912D01D1F4BEAE5E61922FBA1C3676B51CB293689F33DB9E4E05DD53E
MD5 SHA1 SHA512 SSDEEP TLSH

Time.exe

SHA256 dc476ae39effdd80399b6e36f1fde92c216a5bbdb6b8b2a7ecbe753e91e4c993
MD5 9d0d2fcb45b1ff9555711b47e0cd65e5
SHA1 958f29a99cbb135c92c5d1cdffb9462be35ee9fd
SHA512 8fd4ce4674cd52a3c925149945a7a50a139302be17f6ee3f30271ebe1aa6d92bcb15a017dca989cd837a5d23cd56eaacc6344dc7730234a4629186976c857ca9
SSDEEP 1536:TfrQPF/jIqQb6XFEs0hWbY39RhDqY1C8a2RDkHa8C4pRhYgyF/l3lwad2ktOvyz/:jr4NjIPmcaav1XRDcZhYp9/Ykz/
TLSH
T1D5B312E1938D0E31E0BF2A35ADD4871D2BB4F4D24326EB4F252482F77C24A0B1EAC559
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

290817

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

82KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

Time.zip

Time.exe

generic