Equilotl[.]exe | Triage™

General

Target
Equilotl.exe
Size 11.4MB
Sample261024-mdrpystwbv
SHA256 38b3df0a5adac78245d2f4ea0411623537a8c354025617a91fbf3c9c92fe3c80
MD5 f2a7b629ac3c3d3196c624df9bc9081e
SHA1 7d59f476ecdb870d8a52cf03545bc20dce6e87b7
SHA512 95fc7540b23fe329f4f5fe1645e0b3faa933787733a14d0467ce3736f31b97f3ee417d6d18d98d24a37d0f12eeefca11b686aa04c24bb545b477b73d770cd38d
SSDEEP 98304:wgiE4Uz0FsinTWTMFcXmOZKWTz7yMcZSF7qAyLjUTEqdDuGG3pPVmryRIMdFR51A:wgA5R6HtZKWTDSUfdkDbfYL
TLSH
T138C66B87E8A614E8C1AAE5708573A633BB317C490B2527D71B90F6342F76FD05EBA710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Equilotl.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 38b3df0a5adac78245d2f4ea0411623537a8c354025617a91fbf3c9c92fe3c80
MD5 f2a7b629ac3c3d3196c624df9bc9081e
SHA1 7d59f476ecdb870d8a52cf03545bc20dce6e87b7
SHA512 95fc7540b23fe329f4f5fe1645e0b3faa933787733a14d0467ce3736f31b97f3ee417d6d18d98d24a37d0f12eeefca11b686aa04c24bb545b477b73d770cd38d
SSDEEP 98304:wgiE4Uz0FsinTWTMFcXmOZKWTz7yMcZSF7qAyLjUTEqdDuGG3pPVmryRIMdFR51A:wgA5R6HtZKWTDSUfdkDbfYL
TLSH
T138C66B87E8A614E8C1AAE5708573A633BB317C490B2527D71B90F6342F76FD05EBA710
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

22926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Documents and Settings\1134\My Documents\Visual Studio 2008\Projects\72389 binder stub\72389 binder stub\obj\Debug\72389 binder stub.pdb