General

  • Target

    Purchase order ST023Z499740 & Company profile_pdf1.exe

  • Size

    349KB

  • MD5

    106711a5c03e6bb7c03ff889b1c2c213

  • SHA1

    59a0b6c3f17d8c68bbf249dac4e606ecef4b249e

  • SHA256

    28000eba88463ba310006a12861b48fc9335d93053b91e71e537d36daa09f6e0

  • SHA512

    285967f17c3d5bc89e2821acbddbb4ee77b5883819516743d4b4c3b949c35cfadf06748463bdb9c0d476f45a12b1b4f3704c07654608bc5042b84de85a5308be

  • SSDEEP

    6144:NpWQN9rSwaEj28RLURnZpd4wipbpdhws4rcDJvaQLhKK/qPONI:XWcLF28RLknZpdViRp3vOckQLPJ

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Purchase order ST023Z499740 & Company profile_pdf1.exe
    .exe windows x64


    Headers

    Sections