156092317[.]eml | Triage™

General

Target
156092317.eml
Size 18KB
Sample240402-pf91eshf3v
SHA256 553abfb83dd716a783dc75c054996d0f1644b20c7e9237f47fcfe2568a8b84a3
MD5 1789ad6e93df81a48394ca3d42280f81
SHA1 950d9476e64b6dc1b23fd41e3253b6a677cf387a
SHA512 8c15fc952f81d9ff7e64d4784481c2902834cc934a820660aa3d2c04665a844cb667cb8b885c7a2f9caa8e7dd7977d15327c150dc620999608890e8f635d2fbd
SSDEEP 384:IqeI/5Mi25b0SRiENKQ5PkLrESNR9sqeck8noLjSESbJBVtRk+miMWX:Ipat00HQoISDmqet8n+YPbGGMi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Cpzldy.exe

File Explorer

156092317.eml

.eml 18KB
Revised order.rar

.rar 12KB
Cpzldy.exe

.exe 24KB
email-html-1.txt

.html 414B

156092317.eml

SHA256 553abfb83dd716a783dc75c054996d0f1644b20c7e9237f47fcfe2568a8b84a3
MD5 1789ad6e93df81a48394ca3d42280f81
SHA1 950d9476e64b6dc1b23fd41e3253b6a677cf387a
SHA512 8c15fc952f81d9ff7e64d4784481c2902834cc934a820660aa3d2c04665a844cb667cb8b885c7a2f9caa8e7dd7977d15327c150dc620999608890e8f635d2fbd
SSDEEP 384:IqeI/5Mi25b0SRiENKQ5PkLrESNR9sqeck8noLjSESbJBVtRk+miMWX:Ipat00HQoISDmqet8n+YPbGGMi
MD5 SHA1 SHA512 SSDEEP

Cpzldy.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b5ef62838f5833daa0dc09657aa57bc1cf157a44a1b943147eaaea4150afe5af
MD5 876b77dbb4ec0c705f19cedef2064e55
SHA1 3e7886679433b5dcb0c81790c5ee58cc5c3b270f
SHA512 29a7cdc958d13e96c8242ae551ca27e44b2476615dd3bcbcb7b122aaa9cb7a4e118591e5723ed66450977a15ad1b934662fe57e4c31497a51b23ef0c9b5151ca
SSDEEP 384:esDgASbLl6fUIsCxDV+IjjCkIMkpnilsC1EAdc7fylF8lkGcrS0opDHOhoSK096p:esQ2xDVwkIM6QmAG7fylCkGgSRB2oS4p
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

30142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

156092317.eml

Revised order.rar

Cpzldy.exe

mscoree

dotnet

email-html-1.txt

Sharing

General

Malware Config

Signatures

File Explorer

156092317.eml

Revised order.rar

Cpzldy.exe

mscoree

dotnet

email-html-1.txt