BILL COPIES FOR THE CARGO LOADED[.]exe

General

Target
BILL COPIES FOR THE CARGO LOADED.exe
Size 698KB
Sample231211-slem9abeh2
SHA256 9d687a4e898291e7635a79e45f7cb5cd2f987dcd6f909d495e83dac2e1fd0cfc
MD5 b1481791fc782040d8533019a3095e57
SHA1 4f6699140313855dbe364831fbbaf5e794aac9d6
SHA512 d853b650704ad89f82df75e581dc9e53b0b9fd8749a14b2a037dde4d3b8f5a105c37127b836c3f38011b0e5984b8f78537ba2f4ab64304a7b3ce2a6e23e0c514
SSDEEP 12288:yw3IU8S6eUdvSTznalJakk9uUXKsU3ky+pJ2frjrnGbW9fTbKYCNjPVHdys9bzs7:3ItSAdj3k9rKBPrGi9bbEPVHn5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BILL COPIES FOR THE CARGO LOADED.exe

File Explorer

BILL COPIES FOR THE CARGO LOADED.exe

.exe 698KB

BILL COPIES FOR THE CARGO LOADED.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 9d687a4e898291e7635a79e45f7cb5cd2f987dcd6f909d495e83dac2e1fd0cfc
MD5 b1481791fc782040d8533019a3095e57
SHA1 4f6699140313855dbe364831fbbaf5e794aac9d6
SHA512 d853b650704ad89f82df75e581dc9e53b0b9fd8749a14b2a037dde4d3b8f5a105c37127b836c3f38011b0e5984b8f78537ba2f4ab64304a7b3ce2a6e23e0c514
SSDEEP 12288:yw3IU8S6eUdvSTznalJakk9uUXKsU3ky+pJ2frjrnGbW9fTbKYCNjPVHdys9bzs7:3ItSAdj3k9rKBPrGi9bbEPVHn5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

719854

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

BILL COPIES FOR THE CARGO LOADED.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

BILL COPIES FOR THE CARGO LOADED.exe

mscoree

dotnet