sing-box-1[.]13[.]0[.]h5-windows-386[.]zip

General

Target
sing-box-1.13.0.h5-windows-386.zip
Size 21.9MB
Sample261113-hmwcaagy3x
SHA256 61c1247031485c28c66f985bb84c33b21a1dcede448db1412e5ce0a4d35619c6
MD5 06b022c2aef134f843a5353f10e558c7
SHA1 7e378edf32ce179ba22e7c522cd595ec6ee88991
SHA512 c867283fc7b98b6e1aaf97472b5cd708702e538e0d000d09ccbec3889aae0e1c503725a47ce51d04177fe65805303e848bbc9ce5c30dcf9a98e09acf4b5cca23
SSDEEP 393216:azDcR1OO3okGYbhO9dbo/THpU3cs4wj6oCrT3+Ma7FottD5cFvG1CdUfdEMQGg1H:azwR09os4aT4wOVO1otB5MGqmTQGgf1
TLSH
T1203733D8F78480B2DEF6F5F1009C6E1A09A5CB829623F51553F1489D0B9AECC96639F3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sing-box-1.13.0.h5-windows-386/sing-box.exe

File Explorer

sing-box-1.13.0.h5-windows-386.zip

.zip 21.9MB
sing-box-1.13.0.h5-windows-386/LICENSE

808B
sing-box-1.13.0.h5-windows-386/sing-box.exe

.exe 61.7MB

sing-box-1.13.0.h5-windows-386.zip

SHA256 61c1247031485c28c66f985bb84c33b21a1dcede448db1412e5ce0a4d35619c6
MD5 06b022c2aef134f843a5353f10e558c7
SHA1 7e378edf32ce179ba22e7c522cd595ec6ee88991
SHA512 c867283fc7b98b6e1aaf97472b5cd708702e538e0d000d09ccbec3889aae0e1c503725a47ce51d04177fe65805303e848bbc9ce5c30dcf9a98e09acf4b5cca23
SSDEEP 393216:azDcR1OO3okGYbhO9dbo/THpU3cs4wj6oCrT3+Ma7FottD5cFvG1CdUfdEMQGg1H:azwR09os4aT4wOVO1otB5MGqmTQGgf1
TLSH
T1203733D8F78480B2DEF6F5F1009C6E1A09A5CB829623F51553F1489D0B9AECC96639F3
MD5 SHA1 SHA512 SSDEEP TLSH

sing-box-1.13.0.h5-windows-386/sing-box.exe

IMPHASH c1a56dd2884ebae2645c18b421ad3aee
SHA256 530c22359b9af0ce338f9cf148e99a5bdd891ee66f6e3b470a7723232b3e1fb6
MD5 e124b33fbef4ee97c5dad2b50626c6e2
SHA1 f81b6ec4da6078853ec987efcd128c59ef19da5e
SHA512 5f03fc1572a4bad19fe862acacd5a400749482294e521d05953b338907c7d422c198a22a04c91d95dab993ecf807baa35b7bccc45594f3e7db8351ec933a5662
SSDEEP 393216:dDy0vWx2X7z4xkKLjIdKgrODpCLKjlOXI8Ho8Thv:pRWx2X70llpbjI3T
TLSH
T1E1E74B81FA4740F5EE0B4830A58B323F33355D028B25CBDBEB547B2AF97A19259BB115
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

571904

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

27.2MB

Virtual Size

27.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

31.4MB

Virtual Size

31.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.6MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

sing-box-1.13.0.h5-windows-386.zip

sing-box-1.13.0.h5-windows-386/LICENSE

sing-box-1.13.0.h5-windows-386/sing-box.exe

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

sing-box-1.13.0.h5-windows-386.zip

sing-box-1.13.0.h5-windows-386/LICENSE

sing-box-1.13.0.h5-windows-386/sing-box.exe

kernel32

generic