power[.]zip | Triage™

General

Target
power.zip
Size 24KB
Sample261011-phy1ya1tex
SHA256 466162195afd74fbd22bc8de2fd04e85387f91cc3bce5183095fdcc256c88999
MD5 a6895eaf674b39fdf388e3d1688741d7
SHA1 9f2dde7a4b4a28e4ad61293ba42a7fd81c0845de
SHA512 57a9617fd89e961e22b82a0d6b025e3efe277c9703ff3693ce93356c4799d93c06821b5a84410d01da1cff85b90473a7cf5ffe9043c54a36eeee08b3d77fdd78
SSDEEP 384:TSMdEV06L605ihq6oFb9o45pSRLSw8WR+u25cbLztDvYcWBwUQRd1j0Y/Od:TS600C6Gd6oV65Ld25WLztDEyXj0Y/W
TLSH
T158B2D090B91B0C23FCC529AEDE3D821600114BF19F29BF8DE4567D52E85AFED901686F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/power.exe

File Explorer

power.zip

.zip 24KB
power.exe

.exe 376KB

power.zip

SHA256 466162195afd74fbd22bc8de2fd04e85387f91cc3bce5183095fdcc256c88999
MD5 a6895eaf674b39fdf388e3d1688741d7
SHA1 9f2dde7a4b4a28e4ad61293ba42a7fd81c0845de
SHA512 57a9617fd89e961e22b82a0d6b025e3efe277c9703ff3693ce93356c4799d93c06821b5a84410d01da1cff85b90473a7cf5ffe9043c54a36eeee08b3d77fdd78
SSDEEP 384:TSMdEV06L605ihq6oFb9o45pSRLSw8WR+u25cbLztDvYcWBwUQRd1j0Y/Od:TS600C6Gd6oV65Ld25WLztDEyXj0Y/W
TLSH
T158B2D090B91B0C23FCC529AEDE3D821600114BF19F29BF8DE4567D52E85AFED901686F
MD5 SHA1 SHA512 SSDEEP TLSH

power.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5f1b7e064ce2faa2368f90b7faa4003b845d7a13b30ce6a50f32a876f7201066
MD5 d516113ce37e4b1b062419987a9b0d18
SHA1 fc13f67d5cd1261f4dc74aa147b355d6174a2717
SHA512 790c74d006bba5a75b6a3ae956121148367e18bc84df4ad9ad419de704972e70a62d66538349a844ca3d8b4033f097a4272240e5022e60e0c97b0519402032eb
SSDEEP 1536:z4U3R+2Yj4vPkqA+FJrbC1lIr7CxP7wlwF8wZ5E1:B3R+j+FJrbC1lIr7CxP7waFu
TLSH
T134842849E762ECE8FE6B1379657118223F418C5EA5D928AC218DF6253C36253409BCFF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

power.zip

power.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

power.zip

power.exe

mscoree

dotnet