Boxy_p[.]exe | Triage™

General

Target
Boxy_p.exe
Size 7.4MB
Sample261027-t68mhas16p
SHA256 22f259a03caa7de52d336e3ccb97642b79980a2a84d1d70cf618b09d97b02883
MD5 65ccfcd5c510b44e675d450e48527e5e
SHA1 ffbf23f21528ffe1e189bc96b3e9099870ca17c7
SHA512 33afe3e7d254a4683867f792477efad1cfcb76d5a38b18a0cdfedfe42e56713cc8cf18b4291cc830559da24496c82cc6fba839f350ec6e14ff8f5f0db943f15b
SSDEEP 98304:zm8SALtfIlkp36vF1FXbkgrzDgifwHGiZRf:zbR3+zhbkgHDeGiZRf
TLSH
T1BA765B1577C48A22C47A83758C64F240FFB1A93723269B4A38CC6E6B1F73F5196A7352
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Boxy_p.exe

File Explorer

Boxy_p.exe

.exe 7.4MB

Boxy_p.exe

SHA256 22f259a03caa7de52d336e3ccb97642b79980a2a84d1d70cf618b09d97b02883
MD5 65ccfcd5c510b44e675d450e48527e5e
SHA1 ffbf23f21528ffe1e189bc96b3e9099870ca17c7
SHA512 33afe3e7d254a4683867f792477efad1cfcb76d5a38b18a0cdfedfe42e56713cc8cf18b4291cc830559da24496c82cc6fba839f350ec6e14ff8f5f0db943f15b
SSDEEP 98304:zm8SALtfIlkp36vF1FXbkgrzDgifwHGiZRf:zbR3+zhbkgHDeGiZRf
TLSH
T1BA765B1577C48A22C47A83758C64F240FFB1A93723269B4A38CC6E6B1F73F5196A7352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

268662

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

Boxy_p.exe