payment slip[.]r15[.]rar

General

Target
payment slip.r15.rar
Size 647KB
Sample240408-j15csacf33
SHA256 9d418055b5f4e136df08686972fab53b99850f9acac7db80fc40114689b13bfb
MD5 92fac6b148ef5acdd68895050149afd5
SHA1 b98a3d3755715688826936eab4864cf2e3e63e34
SHA512 d8887f1f4deffc99b7682d78e454b822bfcdb04ba770f63726b52f4653e1f481864126a104eecb4e067886a7ae21064b38f4b6afc30d7aabd393fccd9c28e393
SSDEEP 12288:UHMb6T9WmB6KB3JIxYamt8X03itbS/Ift9JFKnwGu+hh3KCNSOcFhfc:1qvB3JzW7t/HVmaj9Ftc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/payment slip.exe

File Explorer

payment slip.r15.rar

.rar 647KB
payment slip.exe

.exe 677KB

payment slip.r15.rar

SHA256 9d418055b5f4e136df08686972fab53b99850f9acac7db80fc40114689b13bfb
MD5 92fac6b148ef5acdd68895050149afd5
SHA1 b98a3d3755715688826936eab4864cf2e3e63e34
SHA512 d8887f1f4deffc99b7682d78e454b822bfcdb04ba770f63726b52f4653e1f481864126a104eecb4e067886a7ae21064b38f4b6afc30d7aabd393fccd9c28e393
SSDEEP 12288:UHMb6T9WmB6KB3JIxYamt8X03itbS/Ift9JFKnwGu+hh3KCNSOcFhfc:1qvB3JzW7t/HVmaj9Ftc
MD5 SHA1 SHA512 SSDEEP

payment slip.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f064387ab391aff2b0d120df58a0a98e269843462aca86076a9cb113885bd2cc
MD5 16840755455640657de48aa81c0f5247
SHA1 4b64f121ed06741bb1a36f023beb7a10e26d0b27
SHA512 ed171d8af700f10e63577297c2626a0de99e0099c2a2c58b45731e0255aa923ac5e0b66dff6df28ffdf05b8b7d4cdc403dc74782f9efa5bda6dfb80b377df38b
SSDEEP 12288:aFIB1oVeon3X8hq7WyqJoZnglXHQAM8vj4sbROgnSu2yqfbXxko7EF:aFqo53Mhq7WyqOnK3QkROGbZqjHi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

699062

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wirR.pdb

payment slip.r15.rar

payment slip.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

payment slip.r15.rar

payment slip.exe

mscoree

dotnet