apb[.]rar | Triage™

General

Target
apb.rar
Size 77KB
Sample261027-b85drahy2w
SHA256 59121e8275b69962be3c2ec54c0f3a41e5c6bbe4126154b5f12e3fb186465bfc
MD5 6ed03bc48210b82608f1bd881b6c6b83
SHA1 610ac1a27b123f4f6277e98ca77929f6f54f03d3
SHA512 a745fb72b8334be527c83b83cfed65c97f153037efeeaff0e84af053907566dcbf9d214903f275dc013520e2f314ba1b3d42e6e04757edfa6acc8b8b411221bf
SSDEEP 1536:eKgj1qBzucegTDY9Van8D83wxI9/u1JYeYp3YX7MffRYhJZfL+:eVj4agT/3w+o1JYxGjJl+
TLSH
T1F67302A737BA21F8B19751968EE5CEF8D0B4CBD486D7CEDC41E6963860F0668F54CA00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/apb.exe

File Explorer

apb.rar

.rar 77KB
apb.exe

.exe 128KB

apb.rar

SHA256 59121e8275b69962be3c2ec54c0f3a41e5c6bbe4126154b5f12e3fb186465bfc
MD5 6ed03bc48210b82608f1bd881b6c6b83
SHA1 610ac1a27b123f4f6277e98ca77929f6f54f03d3
SHA512 a745fb72b8334be527c83b83cfed65c97f153037efeeaff0e84af053907566dcbf9d214903f275dc013520e2f314ba1b3d42e6e04757edfa6acc8b8b411221bf
SSDEEP 1536:eKgj1qBzucegTDY9Van8D83wxI9/u1JYeYp3YX7MffRYhJZfL+:eVj4agT/3w+o1JYxGjJl+
TLSH
T1F67302A737BA21F8B19751968EE5CEF8D0B4CBD486D7CEDC41E6963860F0668F54CA00
MD5 SHA1 SHA512 SSDEEP TLSH

apb.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 135e3c8396706cee86251fb68e1dc345b5abe54a0fa6799d524097f6920f6be6
MD5 c54f541ee40efe3b938da694c7f45bca
SHA1 97642ce3c2238011ac3043fd78a9be2650a68bbb
SHA512 ce066bc2feb0caf2bfdf57dfdbe49b40dd0ee12262f3226dc560fdf1213a3bbc4b89bc4cc934c5a4b91ff18fff311cd6730161fc56152fee917f7d88ad218d32
SSDEEP 3072:K86ffh6IBxqc99OyLDFLvBeNNB5kNm8Y:VMhTBxf9tDxpSPv8
TLSH
T132D36D023A5BC220D5182573C5DF111803A29F877AB3E75B3D9C736E0B267E2AF556CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

132574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

anu7.pdb

apb.rar

apb.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

apb.rar

apb.exe

mscoree

dotnet