ezicnet[.]zip | Triage™

General

Target
ezicnet.zip
Size 18.4MB
Sample261024-e65taaw17l
SHA256 e65365ff773108f3abc5be08ca31e37024c52eef74a13482c1d5cbaa4c236e46
MD5 3eed2c7e4c0f106dc254b0718e96bda5
SHA1 61310c6d95e0c4aea73f7e8e848e1ba267e3a7bb
SHA512 87159a377b3064c343d74efdb6aa17a0f13a3068fb86aa78bb2d830fdbe2b6c0d428736aa3fd8761aec0d0b77d496b04da6ea58a74df842eb44fd67c972b26ab
SSDEEP 393216:o85gpYIdaJ6WtsSBReE0XoDwR/xDEG1XKkwNvjiIW98RRaXMPCNkuy4A6ZGW+3dd:o85gpvT6UEwWJ5+/6RRTAkuy4A6I/k2
TLSH
T1921733DC9B364AF1D1980B167136E5DFFE6C8262CBE9F8E0F5C70B295414742C28626E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Unlock.exe

File Explorer

ezicnet.zip

.zip 18.4MB
Unlock.exe

.exe 18.4MB

ezicnet.zip

SHA256 e65365ff773108f3abc5be08ca31e37024c52eef74a13482c1d5cbaa4c236e46
MD5 3eed2c7e4c0f106dc254b0718e96bda5
SHA1 61310c6d95e0c4aea73f7e8e848e1ba267e3a7bb
SHA512 87159a377b3064c343d74efdb6aa17a0f13a3068fb86aa78bb2d830fdbe2b6c0d428736aa3fd8761aec0d0b77d496b04da6ea58a74df842eb44fd67c972b26ab
SSDEEP 393216:o85gpYIdaJ6WtsSBReE0XoDwR/xDEG1XKkwNvjiIW98RRaXMPCNkuy4A6ZGW+3dd:o85gpvT6UEwWJ5+/6RRTAkuy4A6I/k2
TLSH
T1921733DC9B364AF1D1980B167136E5DFFE6C8262CBE9F8E0F5C70B295414742C28626E
MD5 SHA1 SHA512 SSDEEP TLSH

Unlock.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b0d52146decd4f82264dddd0df1e99a5e4362a1c6f0afed5281224b6c12300cf
MD5 133e3ba024fc1beff6b95c781a829cbd
SHA1 477fb8fd3c652a3d2780017a5d45f0f8f6ab77fd
SHA512 34caad9301be95981b036677150dc90c4d9c1019c3ba8565828397f74321e53a8a7ac24f86e9e465bc35a237dc052dc5044ce47f592770442c4299de98d0d46f
SSDEEP 393216:U+d2TcYfaN4OtKitnmkKZqHyhhlD46TJmWq7LrOOQxSzBadI1g9uuu8QgfkgonBY:U+d2T33emkacHHiTIzB5Wuuu8Qg8BY
TLSH
T1AA1733D8AB364AF1D1980B357136E5DFFF6C8262CAEAF8A0F5C707195414742C28627E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

19304958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ezicnet.zip

Unlock.exe

mscoree

dotnet

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

ezicnet.zip

Unlock.exe

mscoree

dotnet