5c0eac330991bc97bded4021d75100846d2003bc9a1e94db4b174eae52dc816b[.]bin[.]zip

General

Target
5c0eac330991bc97bded4021d75100846d2003bc9a1e94db4b174eae52dc816b.bin.zip
Size 2.2MB
Sample260930-m9b95sdg46
SHA256 5c0eac330991bc97bded4021d75100846d2003bc9a1e94db4b174eae52dc816b
MD5 30f59c5ec9301f8d0360df48c8357fe4
SHA1 0db0df238940d0009122b6fc74286efe444bdc0e
SHA512 75039e01170dccaa9973a85036032b2dbb8fbe39fa3b3568078e8429beb365c163ca9136604d0168448ed2766d167ac9d3b11a8b69fc19114105c33c816cddd3
SSDEEP 49152:xOD2CqkDBDgqfkzPF85Lck96YTURXWAuL022sptjLCms9UqBYjlR0t9+T9919eCJ:sCEDBxkN85Lck9JTAXU+gWuqolWX+z1j
TLSH
T148B533A71C410517D8E61838A96ECFBD34BCC6620321D1881858F1A5EF94FA8FDEF5A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Trololo.exe

File Explorer

5c0eac330991bc97bded4021d75100846d2003bc9a1e94db4b174eae52dc816b.bin.zip

.zip 2.2MB
Trololo.exe

.exe 3.0MB

5c0eac330991bc97bded4021d75100846d2003bc9a1e94db4b174eae52dc816b.bin.zip

SHA256 5c0eac330991bc97bded4021d75100846d2003bc9a1e94db4b174eae52dc816b
MD5 30f59c5ec9301f8d0360df48c8357fe4
SHA1 0db0df238940d0009122b6fc74286efe444bdc0e
SHA512 75039e01170dccaa9973a85036032b2dbb8fbe39fa3b3568078e8429beb365c163ca9136604d0168448ed2766d167ac9d3b11a8b69fc19114105c33c816cddd3
SSDEEP 49152:xOD2CqkDBDgqfkzPF85Lck96YTURXWAuL022sptjLCms9UqBYjlR0t9+T9919eCJ:sCEDBxkN85Lck9JTAXU+gWuqolWX+z1j
TLSH
T148B533A71C410517D8E61838A96ECFBD34BCC6620321D1881858F1A5EF94FA8FDEF5A9
MD5 SHA1 SHA512 SSDEEP TLSH

Trololo.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3d0efd55bde5fb7a73817940bac2a901d934b496738b7c5cab7ea0f6228e28fe
MD5 b6d61b516d41e209b207b41d91e3b90d
SHA1 e50d4b7bf005075cb63d6bd9ad48c92a00ee9444
SHA512 3217fc904e4c71b399dd273786634a6a6c19064a9bf96960df9b3357001c12b9547813412173149f6185eb5d300492d290342ec955a8347c6f9dcac338c136da
SSDEEP 49152:lj3iZ1MHTIo3dLoYNiDSeP7jxPXyouZ3xtNg5EzN3CD70c5iMOIEQLx3+bt+g:lma9NLYGG7FduZhtau3Cv0cIIEQVubt9
TLSH
T12DE5E1A3D0438B19FBC78B77E7D26C081DA4B01CF5B9661F35889D49D2E370076693A6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3138558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Alexander\Documents\Visual Studio 2008\Projects\Virus\Virus\obj\Release\Virus.pdb

5c0eac330991bc97bded4021d75100846d2003bc9a1e94db4b174eae52dc816b.bin.zip

Trololo.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

5c0eac330991bc97bded4021d75100846d2003bc9a1e94db4b174eae52dc816b.bin.zip

Trololo.exe

mscoree

dotnet