046bf1870416a2ea4108d3809fcdfda514663aa9fabd74b88f78c7e332eb397d[.]zip

General

Target
046bf1870416a2ea4108d3809fcdfda514663aa9fabd74b88f78c7e332eb397d.zip
Size 790KB
Sample240402-qjdxtsbd28
SHA256 1b237b3ab8599d30b0fd3000049e5a6b7b2fde1dc6befa4a1929033d83533bd2
MD5 ccee184f719e18e696b28571c0adf6f1
SHA1 e94d555d306dd1c92969a7cbe75f8b1aa20fb9e3
SHA512 abe8a86568080b776920b8b20f63b03a278a0e33a46f25a56f165abc435fe51f32f4e1d9395b9419a1c7e204f2b727866377df45633703e42ff879424b820bc7
SSDEEP 12288:eZRu797xOniXY5BvktnW6hrNifuxavClJ0LmB8dwYC16a4FGGohmjo:e67qiXY7ktn7uHCoLmB8dvA47vc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/894680380-ALVACO ORDER 2023.exe

File Explorer

046bf1870416a2ea4108d3809fcdfda514663aa9fabd74b88f78c7e332eb397d.zip

.zip 790KB
046bf1870416a2ea4108d3809fcdfda514663aa9fabd74b88f78c7e332eb397d.img

.iso 1.4MB
894680380-ALVACO ORDER 2023.exe

.exe 928KB

046bf1870416a2ea4108d3809fcdfda514663aa9fabd74b88f78c7e332eb397d.zip

SHA256 1b237b3ab8599d30b0fd3000049e5a6b7b2fde1dc6befa4a1929033d83533bd2
MD5 ccee184f719e18e696b28571c0adf6f1
SHA1 e94d555d306dd1c92969a7cbe75f8b1aa20fb9e3
SHA512 abe8a86568080b776920b8b20f63b03a278a0e33a46f25a56f165abc435fe51f32f4e1d9395b9419a1c7e204f2b727866377df45633703e42ff879424b820bc7
SSDEEP 12288:eZRu797xOniXY5BvktnW6hrNifuxavClJ0LmB8dwYC16a4FGGohmjo:e67qiXY7ktn7uHCoLmB8dvA47vc
MD5 SHA1 SHA512 SSDEEP

Password

infected

894680380-ALVACO ORDER 2023.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 efc5c94996f4af7ae3a2d17dfc73dd7fe3f84269e73bb611e5806f2fd131a646
MD5 d616794167af5c88812aabaf65120fad
SHA1 ad1289875a05ba89cb6e10b08b95ee45bdf79d0f
SHA512 8c2211e1472c53863d9c0bed2baf03c6ea2dd9b568480cee909a4fa157c229e3e651afc673168304bdfa875bf0eb056896dbb3906e1d66dcc8b23e4e075bceee
SSDEEP 24576:Jg7gUMoMnm9cU9VHb5Z763rs7u8BeV67s7nCrt8dB:vWMnGcU95nAsyTKug+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

953314

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

046bf1870416a2ea4108d3809fcdfda514663aa9fabd74b88f78c7e332eb397d.zip

046bf1870416a2ea4108d3809fcdfda514663aa9fabd74b88f78c7e332eb397d.img

894680380-ALVACO ORDER 2023.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

046bf1870416a2ea4108d3809fcdfda514663aa9fabd74b88f78c7e332eb397d.zip

046bf1870416a2ea4108d3809fcdfda514663aa9fabd74b88f78c7e332eb397d.img

894680380-ALVACO ORDER 2023.exe

mscoree

dotnet