Payload[.]exe | Triage™

General

Target
Payload.exe
Size 98KB
Sample261012-v16rdsds4x
SHA256 a6fb82bf1a6cd4537f8e7266fa764cd132ae0fe33817c696713049752cc747d0
MD5 08977d987fd03e896662bc4f4ceeed9f
SHA1 e4214b873410030bbb28d0f64b03ecd900720371
SHA512 bd494855ac85c22dddbc50f2aca6e54aa552f717db6a4c1aedabd119666610b5e873750107f4683da6c5ce9e76efc4cb64f966eb102658c8b087e1870bd10537
SSDEEP 3072:A0oQlVlA1sF5J+1k1xfNiipm+0hpgNCtZNT9+04sg23L:A0ogDak1xfNjm+TO
TLSH
T104A302C2CFAF8BD9EF5C9178B6AEF452C16085253044A18F70DD75DABF52B08461D7A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Payload.exe

IMPHASH e13c33925aac9b3c5ee3b079f464e9e5
SHA256 a6fb82bf1a6cd4537f8e7266fa764cd132ae0fe33817c696713049752cc747d0
MD5 08977d987fd03e896662bc4f4ceeed9f
SHA1 e4214b873410030bbb28d0f64b03ecd900720371
SHA512 bd494855ac85c22dddbc50f2aca6e54aa552f717db6a4c1aedabd119666610b5e873750107f4683da6c5ce9e76efc4cb64f966eb102658c8b087e1870bd10537
SSDEEP 3072:A0oQlVlA1sF5J+1k1xfNiipm+0hpgNCtZNT9+04sg23L:A0ogDak1xfNjm+TO
TLSH
T104A302C2CFAF8BD9EF5C9178B6AEF452C16085253044A18F70DD75DABF52B08461D7A0
MD5 SHA1 SHA512 SSDEEP TLSH

Password

hjh

Minor OS version

0

Major OS version

4

Entry point

237735

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths