صورتي[.]zip | Triage™

General

Target
صورتي.zip
Size 408KB
Sample261026-qd3c8sd16s
SHA256 7ce17021a16c55450ca9024b8b7ffa28ccd9ffb13c64bc6437adf80bbd1121c6
MD5 4f876ae942756510a6cd193a65803533
SHA1 d3e40b48e95936c6a1c8e019f111429bfd43a749
SHA512 fb7cb31d633e680f1c5c2d6aca743da4be6b79351d3dccd5d5ca9199b7cff75a29a0d6ec794673e8b92ba7d625c40990af0e45f342463be8cc405022a9792832
SSDEEP 12288:DeEfTerLyDGTPNzHfI/J188zTj/KOyvPjGQqVJzS1/xW:aEfTABTPNt8zN0PjG/zSVxW
TLSH
T15294231A9FA96CF0C2F68E7B8C4C3983B9490AD8DB17C6017ADD9D02D53E2723617532
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/windows 10 2015.scr

File Explorer

صورتي.zip

.zip 408KB
220728.jpg

.jpg 256KB
windows 10 2015.scr

.exe 378KB

صورتي.zip

SHA256 7ce17021a16c55450ca9024b8b7ffa28ccd9ffb13c64bc6437adf80bbd1121c6
MD5 4f876ae942756510a6cd193a65803533
SHA1 d3e40b48e95936c6a1c8e019f111429bfd43a749
SHA512 fb7cb31d633e680f1c5c2d6aca743da4be6b79351d3dccd5d5ca9199b7cff75a29a0d6ec794673e8b92ba7d625c40990af0e45f342463be8cc405022a9792832
SSDEEP 12288:DeEfTerLyDGTPNzHfI/J188zTj/KOyvPjGQqVJzS1/xW:aEfTABTPNt8zN0PjG/zSVxW
TLSH
T15294231A9FA96CF0C2F68E7B8C4C3983B9490AD8DB17C6017ADD9D02D53E2723617532
MD5 SHA1 SHA512 SSDEEP TLSH

windows 10 2015.scr

IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
SHA256 2eb090622505515faad2a8969a08988ba494acb27a7e1a153c37041c8b7831c4
MD5 657bae4a7b8ae31b3e314353db2ef55c
SHA1 6b5c245be855e5cb350a18b929a37ee2c1f52c27
SHA512 250f3720122fba465a7d0b4590da5ca101839527a0a9bae1c98396617db49be2f55176713fea4da83739e65da997227bd77f77e9d8d0f0439a2af27ec822ee69
SSDEEP 3072:zloQinIaELNR57J1TezseMY5dWCTWoCvIz7tL6PHZWDCEhzhAJr+ezce/GOl:z2QinjEFrTewehaoxxs5AhzCN+ej/5
TLSH
T175843E40943CA489C1B772AE4468BB04D39EB9067D35287F7B095CF25B4B4D2F622BB7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5237

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

صورتي.zip

220728.jpg

windows 10 2015.scr

msvcrt

shell32

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

صورتي.zip

220728.jpg

windows 10 2015.scr

msvcrt

shell32

kernel32

generic