a50078c294c3980c23fc8da34f3fd1dc8ca042e07e0f7f67696d7035ec84700d[.]zip

General

Target
a50078c294c3980c23fc8da34f3fd1dc8ca042e07e0f7f67696d7035ec84700d.zip
Size 415KB
Sample240402-qg2acaba4x
SHA256 1020e237ab79171c59cec569952f8f7c7d9ee2056fb3d09a6b3d39de6cb7ca07
MD5 c3f81772cad1f6c538e4fbd0c595ed24
SHA1 7ed5b58eef1d389084aeeabeac0834ab558df38d
SHA512 99f6b97d3fb3af6bf8d6e0c6ad21d0f51abe433956e01978883a7ebc4b163c3c28789ad29982b24d645b3907fbe67db26ea7b4630ce95991f37287e322684957
SSDEEP 6144:bcgU7iqq7BDkS3fnwJwh15iYjLVSGdwG7RDd/2yNz2Gh1QvoqOUnkqy9gr2vOQNx:bBN3ow15Bdtt9Ovo0AKiOQNq+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/a50078c294c3980c23fc8da34f3fd1dc8ca042e07e0f7f67696d7035ec84700d.exe

File Explorer

a50078c294c3980c23fc8da34f3fd1dc8ca042e07e0f7f67696d7035ec84700d.zip

.zip 415KB
a50078c294c3980c23fc8da34f3fd1dc8ca042e07e0f7f67696d7035ec84700d.exe

.exe 455KB

a50078c294c3980c23fc8da34f3fd1dc8ca042e07e0f7f67696d7035ec84700d.zip

SHA256 1020e237ab79171c59cec569952f8f7c7d9ee2056fb3d09a6b3d39de6cb7ca07
MD5 c3f81772cad1f6c538e4fbd0c595ed24
SHA1 7ed5b58eef1d389084aeeabeac0834ab558df38d
SHA512 99f6b97d3fb3af6bf8d6e0c6ad21d0f51abe433956e01978883a7ebc4b163c3c28789ad29982b24d645b3907fbe67db26ea7b4630ce95991f37287e322684957
SSDEEP 6144:bcgU7iqq7BDkS3fnwJwh15iYjLVSGdwG7RDd/2yNz2Gh1QvoqOUnkqy9gr2vOQNx:bBN3ow15Bdtt9Ovo0AKiOQNq+
MD5 SHA1 SHA512 SSDEEP

Password

infected

a50078c294c3980c23fc8da34f3fd1dc8ca042e07e0f7f67696d7035ec84700d.exe

SHA256 a50078c294c3980c23fc8da34f3fd1dc8ca042e07e0f7f67696d7035ec84700d
MD5 c8d9593196962fa5d706a207c16674cd
SHA1 686a8e674e6615d5cd91f7b2cba0c755054b3f69
SHA512 5ddae80780c6091bfe0ab5e29bc63732c08ce34f677fc341366dcecf6db9e1bd2e0ed24cfe57eface0d19c6f46010f47eb2d74888b91a503dae00651c4a756bf
SSDEEP 12288:XcTpGLwWpFGIWFfDtaY4S0LEy7w0iymL/:XOpEwiFYxsEyHiyK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\HFayo\obj\Release\HFayo.pdb

Sharing