f[.]zip | Triage™

General

Target
f.zip
Size 283KB
Sample261001-tpwava1wat
SHA256 f89491c03e4577bc733e6bb0a4ae325d662834c4822dcbbd939ba44f510b152b
MD5 70ed10119e40a57a7afd53db28483526
SHA1 b4a2fae0f78042e3fcf8297545a9d1508e813182
SHA512 a4656d7c3fdf8f8c585982de06ed0f8a5ea5fc7dab38379d883cd49cc5c5347e9e1f13b37562437ee023c4b05879fc025f30fa576d3c094f6a306930d4c80ff9
SSDEEP 6144:nCuO4S5vc3xKMxAY78pE49r+vqiY6bw5xSXTENLj9BUYhQl:nhO4S50Nz4J+vZvmKTEpJBG
TLSH
T1975423B1DF7C95EAC6EEBFB05FF42986C196D8572247DE3C586C909E6220CA0B2C44D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/channelhostqijq.exe

File Explorer

f.zip

.zip 283KB
channelhostqijq.exe

.exe 16KB
settingsqijq.bin

273KB

f.zip

SHA256 f89491c03e4577bc733e6bb0a4ae325d662834c4822dcbbd939ba44f510b152b
MD5 70ed10119e40a57a7afd53db28483526
SHA1 b4a2fae0f78042e3fcf8297545a9d1508e813182
SHA512 a4656d7c3fdf8f8c585982de06ed0f8a5ea5fc7dab38379d883cd49cc5c5347e9e1f13b37562437ee023c4b05879fc025f30fa576d3c094f6a306930d4c80ff9
SSDEEP 6144:nCuO4S5vc3xKMxAY78pE49r+vqiY6bw5xSXTENLj9BUYhQl:nhO4S50Nz4J+vZvmKTEpJBG
TLSH
T1975423B1DF7C95EAC6EEBFB05FF42986C196D8572247DE3C586C909E6220CA0B2C44D4
MD5 SHA1 SHA512 SSDEEP TLSH

channelhostqijq.exe

IMPHASH ba897e9366f77c579a77c13ffff6723b
SHA256 6580bd82670a9466345f7783c912ef71a093136682c03ed854033a5fe7cd52de
MD5 b1550304db301a5b23b05d1c898dc1c1
SHA1 af0bf25b4cc5fc0078b1f1dd0b6027545f63839b
SHA512 026fa22cabbaee1d8fecde740e32096bae43ba2ed942a61af2769349b5c0098698a443ca67c82300ccce6d2bf3a849e978dcefa6516d0ff557477484bfec9d34
SSDEEP 384:serVM7X56NdeEm9vNP4iI62LCg9KvNdJ3DhKALhwqFdJpJgLa0MpTE2t7:serVMlVBLq6Lg9KvNdJ3VKALhfgLa1lT
TLSH
T18672FA2F9B81FA2AD85A55B3E2F543F16975E33109459C1AE3402FF0FF31A91260931E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12981

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

f.zip

channelhostqijq.exe

msvcrt

kernel32

generic

settingsqijq.bin

Sharing

General

Malware Config

Signatures

File Explorer

f.zip

channelhostqijq.exe

msvcrt

kernel32

generic

settingsqijq.bin