sphere[.]exe | Triage™

General

Target
sphere.exe
Size 27KB
Sample261011-2lta3sae23
SHA256 f98f5fa139cccb9ef1344f4071f2add345cd8cbae74e52e511c8f5ffff2cb406
MD5 59d6c73d52bc2718bd49ef11d09f7ad7
SHA1 e232ebd99387344240c17eb7869a96e4a72f6be6
SHA512 092a696e36c1be96eae20673e40888b13c7bd66607ad43c7ebe0b7de8f7f2dbb95a63292aae129f19ce959bedab7ad6dcefe4df0450f5590f31cc29b7eefdff8
SSDEEP 768:bhHm66cSTov9ClF1SoUUI0uUPyOQ/Ebzf:bhHm66cSMv9ClF1VUUI0uUPRQ/Eff
TLSH
T134C2271CB3D88777E2FA9FFAA87306020B75F2567921D7DC1A88605D1DB2B804261F63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sphere.exe

File Explorer

sphere.exe

.exe 27KB

sphere.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f98f5fa139cccb9ef1344f4071f2add345cd8cbae74e52e511c8f5ffff2cb406
MD5 59d6c73d52bc2718bd49ef11d09f7ad7
SHA1 e232ebd99387344240c17eb7869a96e4a72f6be6
SHA512 092a696e36c1be96eae20673e40888b13c7bd66607ad43c7ebe0b7de8f7f2dbb95a63292aae129f19ce959bedab7ad6dcefe4df0450f5590f31cc29b7eefdff8
SSDEEP 768:bhHm66cSTov9ClF1SoUUI0uUPyOQ/Ebzf:bhHm66cSMv9ClF1VUUI0uUPRQ/Eff
TLSH
T134C2271CB3D88777E2FA9FFAA87306020B75F2567921D7DC1A88605D1DB2B804261F63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

33438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Admin\source\repos\sphere\sphere\obj\Debug\sphere.pdb

sphere.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

sphere.exe

mscoree

dotnet