Purchase Order no[.] 6060000061 & 6062000041[.]ex[.]exe

General

Target
Purchase Order no. 6060000061 & 6062000041.ex.exe
Size 672KB
Sample240221-hv4cvsdb69
SHA256 6a0b8f403b660202a6d599aa998802af71064fa3cdbbc2377b75885149cf1773
MD5 ee563b140c8ab2739f7b3998c6c054ef
SHA1 ff469f9e34badc395f6c8d3c3a28d9e545d334e7
SHA512 a1e919ca870d14b9e10091516fb49997039d7333752f79a9b54371b0cd8c5faa0a2836ede1a44109d52d3a5947bdde21ca8033a9977dc96fffe69a150176615c
SSDEEP 12288:ucFS4Fplh/fZCfdcmwWq7NfwdXjf7YbHaFS7wrpO4B0Nm5mWK0R0MuC2iN2V:BFS2D/QMWq7NfwNjf7OQgN4xOMuC1QV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Purchase Order no. 6060000061 & 6062000041.ex.exe

File Explorer

Purchase Order no. 6060000061 & 6062000041.ex.exe

.exe 672KB

Purchase Order no. 6060000061 & 6062000041.ex.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 6a0b8f403b660202a6d599aa998802af71064fa3cdbbc2377b75885149cf1773
MD5 ee563b140c8ab2739f7b3998c6c054ef
SHA1 ff469f9e34badc395f6c8d3c3a28d9e545d334e7
SHA512 a1e919ca870d14b9e10091516fb49997039d7333752f79a9b54371b0cd8c5faa0a2836ede1a44109d52d3a5947bdde21ca8033a9977dc96fffe69a150176615c
SSDEEP 12288:ucFS4Fplh/fZCfdcmwWq7NfwdXjf7YbHaFS7wrpO4B0Nm5mWK0R0MuC2iN2V:BFS2D/QMWq7NfwNjf7OQgN4xOMuC1QV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

692750

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ilkf.pdb

Purchase Order no. 6060000061 & 6062000041.ex.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Purchase Order no. 6060000061 & 6062000041.ex.exe

mscoree

dotnet