26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462[.]zip

General

Target
26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462.zip
Size 464KB
Sample240402-mmag2afb4s
SHA256 36a19b9b5248498beab3e43ce3be2b1ac769293acc89df2fbfd6a8c4525a0d1c
MD5 c5c9242ae07d684877da16cdd5f978d9
SHA1 3aef89120f37cbad5fcf02fd39952de9622593f5
SHA512 770d2aedf9ed52ee66bc621922d23a8529c1fb0382e408ad53c634b217ea142a1f740d6213ca9b2b4d56f0f9e97c744aa33a4079a38fb780f02ac62613c460d2
SSDEEP 12288:Xv9VrmIx+zYc+5imWPKjXeIme4gmvE0lvaVue8ZrM:fjq0+McAVW6ec4gzMvaVuFZrM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462.exe

File Explorer

26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462.zip

.zip 464KB
26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462.exe

.exe 488KB

26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462.zip

SHA256 36a19b9b5248498beab3e43ce3be2b1ac769293acc89df2fbfd6a8c4525a0d1c
MD5 c5c9242ae07d684877da16cdd5f978d9
SHA1 3aef89120f37cbad5fcf02fd39952de9622593f5
SHA512 770d2aedf9ed52ee66bc621922d23a8529c1fb0382e408ad53c634b217ea142a1f740d6213ca9b2b4d56f0f9e97c744aa33a4079a38fb780f02ac62613c460d2
SSDEEP 12288:Xv9VrmIx+zYc+5imWPKjXeIme4gmvE0lvaVue8ZrM:fjq0+McAVW6ec4gzMvaVuFZrM
MD5 SHA1 SHA512 SSDEEP

Password

infected

26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462
MD5 a1995d868283174aa130cf719291bd39
SHA1 585c1302132bb9acb7b56a1370a0cc609a6cc380
SHA512 e44244e93d6dce1059a84563807fa747a3cc23613a9d1e7490fc9a49b682453d27408a26444aa0f5c4ad34ef7c39e5af77facc47e495193ea6d6c471b295dd20
SSDEEP 12288:aZcvS2s4WGURNzPhzUQXDbAvScXotUbL:aTBB3RRJAetUbL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

504990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

YXxJ.pdb

26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462.zip

26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462.zip

26094e54ad508b3dcb6e865f95e9d73f921ec0c3b869616fc772a9b7f9218462.exe

mscoree

dotnet