typehaus-agent-windows-amd64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
typehaus-agent-windows-amd64.exe
Size 6.7MB
Sample261113-eegmdazv5n
SHA256 c1f2381f434b8bce14381bd268e017abd39339e0cdc0c9dd08a772e756ed543c
MD5 fae101ef699ad930dd7da06f26955f97
SHA1 00f863802343b9ffd95e61b954f9a83b19af1009
SHA512 6bcf3671e7affe05e3a77ed30a5eb18d45c230cb0754c17d553cf0ca96363c95fdaf9aa43c306c5759379419032cca8f50b8a49aaef220284a53bf6bbad1af44
SSDEEP 49152:bNXT7MjIqzBh/vQhMindVHpfBvCpQ0eMWk+NpWj+8upH6lwDsEquB9S2QeM2Z0Vl:bNMksKaHAs0GcfcUwumvBh8huTcE
TLSH
T13F664907ECA515E5C0AED1318A73A913BB617C494B2163D72B90F6243F77BE0AEB9350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
typehaus-agent-windows-amd64.exe

File Explorer

typehaus-agent-windows-amd64.exe

.exe 6.7MB

typehaus-agent-windows-amd64.exe

IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
SHA256 c1f2381f434b8bce14381bd268e017abd39339e0cdc0c9dd08a772e756ed543c
MD5 fae101ef699ad930dd7da06f26955f97
SHA1 00f863802343b9ffd95e61b954f9a83b19af1009
SHA512 6bcf3671e7affe05e3a77ed30a5eb18d45c230cb0754c17d553cf0ca96363c95fdaf9aa43c306c5759379419032cca8f50b8a49aaef220284a53bf6bbad1af44
SSDEEP 49152:bNXT7MjIqzBh/vQhMindVHpfBvCpQ0eMWk+NpWj+8upH6lwDsEquB9S2QeM2Z0Vl:bNMksKaHAs0GcfcUwumvBh8huTcE
TLSH
T13F664907ECA515E5C0AED1318A73A913BB617C494B2163D72B90F6243F77BE0AEB9350
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

556576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

407KB

Virtual Size

32.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

61KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

typehaus-agent-windows-amd64.exe

kernel32

generic