Illerka[.]C[.]zip | Triage™

General

Target
Illerka.C.zip
Size 69KB
Sample260930-fxkmesww6l
SHA256 1c4fc78582375a26c8006f94a2508bdbcab8e9270db77664267e8cd40d88b0a5
MD5 875068eba4dbca14af4ecee9f3ce39c8
SHA1 b01649b3b0eee07249c12b206bb965d05a4d46c1
SHA512 454ea60c2ddafe84624d201806951ab5bd39ee02b791d0c9156b528b472c9450a80931c2e824ef6fd766566b6d84d15b5e59ecf54d3409edc72a30c5fcb23a16
SSDEEP 1536:0YQmXQuI3FzR2FtNwe2fEP5nUYveadoqpR+nDp2U8+REFWEn8VgiHxKLI:0YQ6IFz4ReEpZOqpMDNREcEn8JKLI
TLSH
T1D663029C9714768A19AEBEE7C434E694AD60878E5AB08C3D588E3A27F0F0C170C17776
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Illerka.C.exe

File Explorer

Illerka.C.zip

.zip 69KB
Illerka.C.exe

.exe 378KB

Illerka.C.zip

SHA256 1c4fc78582375a26c8006f94a2508bdbcab8e9270db77664267e8cd40d88b0a5
MD5 875068eba4dbca14af4ecee9f3ce39c8
SHA1 b01649b3b0eee07249c12b206bb965d05a4d46c1
SHA512 454ea60c2ddafe84624d201806951ab5bd39ee02b791d0c9156b528b472c9450a80931c2e824ef6fd766566b6d84d15b5e59ecf54d3409edc72a30c5fcb23a16
SSDEEP 1536:0YQmXQuI3FzR2FtNwe2fEP5nUYveadoqpR+nDp2U8+REFWEn8VgiHxKLI:0YQ6IFz4ReEpZOqpMDNREcEn8JKLI
TLSH
T1D663029C9714768A19AEBEE7C434E694AD60878E5AB08C3D588E3A27F0F0C170C17776
MD5 SHA1 SHA512 SSDEEP TLSH

Illerka.C.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 cde188d6c4d6e64d6abfdea1e113314f9cdf9417bca36eb7201e6b766e5f5a7f
MD5 c718a1cbf0e13674714c66694be02421
SHA1 001d5370d3a7ee48db6caaecb1c213b5dfdf8e65
SHA512 ba0ddff47b618740dfcb63024435c36d895889dd3cf6b4559969283ba8100e8063f5c7767e56dfab67a2b5c96e4ae22e141e5b09e81be5cec9aa7ca7827b4b8a
SSDEEP 1536:IM64RFcdoYicOWtlo4yJDsE4KmtZxq3/1d+DSaumOY6eeLnAGTpZspibfaSuOypE:IMJkoY9lpoaKm2vacPESu/wK3+
TLSH
T17D84F726092CDC0ED26078F896B0E5AEE07CDE040D6E5464D7B7BD9A8938B5FED1C18D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Michael B\Documents\Visual Studio 2015\Projects\Illerka.C\Illerka.C\obj\x86\Release\Illerka.C.pdb

Illerka.C.zip

Illerka.C.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Illerka.C.zip

Illerka.C.exe

mscoree

dotnet