PCMC Consignment PO[.]rar

General

Target
PCMC Consignment PO.rar
Size 692KB
Sample240408-rsar7sef41
SHA256 32c8ff272c004b5b5b01caf182d858c4ac3ac7c5a5321ca249f4387d697914b5
MD5 4556e9659a9515ee4bb180ea852eb8ff
SHA1 ad0f0e6f96a28c6b2058abe7e9e07e4a00590b99
SHA512 212012ea22643377ef00220cae952d1e30e30378f7f951bd8155969f3c2abb8cdf7596abc4222949e00ab0ddc1b77eaa5f7e4e440a1c1c1ce64f1693af7232b3
SSDEEP 12288:Zaf6Fz73wD+zWYznvEB9WOhqWQH1aiGJ787Go7TJ3MhFDG70YlP5wQBkKqyVZVYL:tgMz69WOU57B79cqwYlP5wMkQpc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/P.I.exe

File Explorer

PCMC Consignment PO.rar

.rar 692KB
P.I.exe

.exe 772KB

PCMC Consignment PO.rar

SHA256 32c8ff272c004b5b5b01caf182d858c4ac3ac7c5a5321ca249f4387d697914b5
MD5 4556e9659a9515ee4bb180ea852eb8ff
SHA1 ad0f0e6f96a28c6b2058abe7e9e07e4a00590b99
SHA512 212012ea22643377ef00220cae952d1e30e30378f7f951bd8155969f3c2abb8cdf7596abc4222949e00ab0ddc1b77eaa5f7e4e440a1c1c1ce64f1693af7232b3
SSDEEP 12288:Zaf6Fz73wD+zWYznvEB9WOhqWQH1aiGJ787Go7TJ3MhFDG70YlP5wQBkKqyVZVYL:tgMz69WOU57B79cqwYlP5wMkQpc
MD5 SHA1 SHA512 SSDEEP

P.I.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 dee1ecc1522e1e800902f87c3cfe8cf086e717b6aaebf4f3c4956f2634d715db
MD5 a500a05ea6d8e24e3e7016c91968d564
SHA1 235896cc03937ecba8cc2cffe8fb82fb2c2b1432
SHA512 088b9176f249e6379e09f8eeac037ed563ec38d7ea85cf330654b89210ae2a432f611c584ee82c5f8b87c9ae13ff6d2d1beca21b37ee600888bc9d68f10888d1
SSDEEP 24576:Io5Da01KVkrYvRuYo1p6m52yuLo5ZYyJvh3v5d:B52VkkvRu3X6kl1hBd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

796526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

PCMC Consignment PO.rar

P.I.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

PCMC Consignment PO.rar

P.I.exe

mscoree

dotnet