payment Slip[.]rar

General

Target
payment Slip.rar
Size 625KB
Sample231024-g5gfeada56
SHA256 e0e8e87d8b668079e18fd61978c63d0e2394549f8c8502015812a4e3733ba809
MD5 1bb9f9317edfb13dd60489107d58441c
SHA1 020632052671f41cd7d4f7e0e6d1817f349fa767
SHA512 334687b3778e5b34c242953aab5ba47f177efb0fdd39755bb75d72414e0738ea0a01e475d7dd6a40e833773f2b773eca8cff49c9de4d8bda257ea1a11756afa5
SSDEEP 12288:+JstvsoZxGfNZv2eOTFDIP3UTP6y4n0rYoTfh9BtUiEnyOtwICQG0w9c8v:n1cNZv2LFD03UTPfbfzKny6w/Yg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MlyCKkKAIVkgTYa.exe

File Explorer

payment Slip.rar

.rar 625KB
MlyCKkKAIVkgTYa.exe

.exe 653KB

payment Slip.rar

SHA256 e0e8e87d8b668079e18fd61978c63d0e2394549f8c8502015812a4e3733ba809
MD5 1bb9f9317edfb13dd60489107d58441c
SHA1 020632052671f41cd7d4f7e0e6d1817f349fa767
SHA512 334687b3778e5b34c242953aab5ba47f177efb0fdd39755bb75d72414e0738ea0a01e475d7dd6a40e833773f2b773eca8cff49c9de4d8bda257ea1a11756afa5
SSDEEP 12288:+JstvsoZxGfNZv2eOTFDIP3UTP6y4n0rYoTfh9BtUiEnyOtwICQG0w9c8v:n1cNZv2LFD03UTPfbfzKny6w/Yg
MD5 SHA1 SHA512 SSDEEP

MlyCKkKAIVkgTYa.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 954ae52d71114f4e45fb12c0045bc4440822b855c3c2b4c5b685823709729e3b
MD5 649a3147128eeec8733fff2fe62483a8
SHA1 7b995f7402c93bc27e178cef4df8b6e02bdb9d3b
SHA512 970cb470280f1a64c20b8e293b654878fcff8a596ae052c71d6de09d7f5392c69e240431ce0b4c7e0c0dfccd6549a00542cc28a624abd971215b1d4abd8fe83f
SSDEEP 12288:yzfqBuFf+k/rNhTC7myFVSQGzX9lXbvgSLaHLm3R/73xVTEaC:yT6+f47myFgQEXjvjKm3RT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

674274

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

payment Slip.rar

MlyCKkKAIVkgTYa.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

payment Slip.rar

MlyCKkKAIVkgTYa.exe

mscoree

dotnet