Overview

overview

10

Static

static

3

Revised Pr...PF.exe

windows7-x64

10

Revised Pr...PF.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ad19f3b83382bd4874693be46fae7c3.bin

  • Size

    463KB

  • MD5

    b56d28e27bef3238de8ec16a11210915

  • SHA1

    34b48893d84f29b4bcc9b904923aea6710551eed

  • SHA256

    b70a1407fc2f0a2eced541c4579404748c0c1a75570d9d773ffdbc73fe6a9bec

  • SHA512

    c9c4670b9770ec1ef1084aca53f7e1c81aab76eec9a76e16ba39b37eabe6fc4af8fe08dc19107201ce3072f47698ff96daed532b508a8f2608a3d881a39b6a8b

  • SSDEEP

    12288:SQU+f8uLfp58lI6CrQVstQmXEF1ytyJduE:vP0uTP82XQatitqE

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ad19f3b83382bd4874693be46fae7c3.bin
    .zip

    Password: infected

  • 42c9d1c730159fea42ed1ae38835ffc8427baf94e5e5fa59e9b140b505cd273c.r00
    .rar

    Password: infected

  • Revised Proforma Invoice WSI116850PF.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections