Ally's Generator_mpgh[.]net[.]zip

General

Target
Ally's Generator_mpgh.net.zip
Size 368KB
Sample260930-sqettayalg
SHA256 18dd8f99e155b29ede1ad04d2080da9fa062ef5f058db96322a811f66167d3ad
MD5 102dbd8b388286e9d68c698af89ae939
SHA1 53ca10e4d09077d7c38bec376f6c7ab255d51f1f
SHA512 e8a9053dbbf5203da46d0e5d66f6c3d1cd43aaa59c286d451ab20d0b601b43a0a7b3e909843770a1aeab4b31c3660300377d453c51b9e7c27184d45b985ec962
SSDEEP 6144:Ebtonoh3mEq5MyRiRd/o10wLhCWpCpLSGyZFj7YslGMuF3R5IAoBtYUwMT:EJDh/K8Rp6dLhCWnGy3YMI3R5Klw2
TLSH
T15D8423AF1171DF060F0DA5D3C87F92A47D4DC8A15E44FAE0D50D53AFAC0996ACB8AB42
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ally's Generator.exe

File Explorer

Ally's Generator_mpgh.net.zip

.zip 368KB
Ally's Generator.exe

.exe 952KB

Ally's Generator_mpgh.net.zip

SHA256 18dd8f99e155b29ede1ad04d2080da9fa062ef5f058db96322a811f66167d3ad
MD5 102dbd8b388286e9d68c698af89ae939
SHA1 53ca10e4d09077d7c38bec376f6c7ab255d51f1f
SHA512 e8a9053dbbf5203da46d0e5d66f6c3d1cd43aaa59c286d451ab20d0b601b43a0a7b3e909843770a1aeab4b31c3660300377d453c51b9e7c27184d45b985ec962
SSDEEP 6144:Ebtonoh3mEq5MyRiRd/o10wLhCWpCpLSGyZFj7YslGMuF3R5IAoBtYUwMT:EJDh/K8Rp6dLhCWnGy3YMI3R5Klw2
TLSH
T15D8423AF1171DF060F0DA5D3C87F92A47D4DC8A15E44FAE0D50D53AFAC0996ACB8AB42
MD5 SHA1 SHA512 SSDEEP TLSH

Ally's Generator.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 13689b4fa389945eebef3b32355b7c185e20dfa3d1c03ded05d6bf3e4d5dd087
MD5 b549952b4f3508d91a268ae8079ebbb2
SHA1 d78b2b5f1298e65bf2833cee0b7a5168160e9a3e
SHA512 3834af15f1887caf6101030f21253d936201184e320129110c42f79c5e574c466c9c5032cca9fd8583ac4d2d83c5a18d2139cd7749ae45a2235063240ac3832d
SSDEEP 24576:h8Az/LMLq42t5X8STJmMRv0nQHOBAjRuRnTab:h8A7LMLqEBAj
TLSH
T183256B1173FC9626D1EFA7B8B470895487F6F406AA77EB8F4B40A5E92CA37408C40767
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

979758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Ally's Generator_mpgh.net.zip

Ally's Generator.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Ally's Generator_mpgh.net.zip

Ally's Generator.exe

mscoree

dotnet