e-Payment Challan[.]Net[.]CMS4006975825[.]exe

General

Target
e-Payment Challan.Net.CMS4006975825.exe
Size 617KB
Sample240415-qcmldsfa88
SHA256 fadcd7b36622cde793fdb8b3c509c13efb05a57e5227ea5c0dac37ef49a5cb02
MD5 d822c95bd53f00fca100fd5a8e262c84
SHA1 5198d2fdc041d5b71fa0ca9e12308b0d835a2e6f
SHA512 3579eff385d1b1c5695f12c061052b594f2659971384d7ea37c4b7f9e46043ed6e7cfdcfa332fc249878ee9efc1b2da85ddb69851f812eb14f072979209bf59c
SSDEEP 12288:+CHNBT5iQt+QD+pkBFJsoFlTlNeg8jQHhpKISzAHEAmD:lNlpBr3d8j8H
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e-Payment Challan.Net.CMS4006975825.exe

File Explorer

e-Payment Challan.Net.CMS4006975825.exe

.exe 617KB

e-Payment Challan.Net.CMS4006975825.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 fadcd7b36622cde793fdb8b3c509c13efb05a57e5227ea5c0dac37ef49a5cb02
MD5 d822c95bd53f00fca100fd5a8e262c84
SHA1 5198d2fdc041d5b71fa0ca9e12308b0d835a2e6f
SHA512 3579eff385d1b1c5695f12c061052b594f2659971384d7ea37c4b7f9e46043ed6e7cfdcfa332fc249878ee9efc1b2da85ddb69851f812eb14f072979209bf59c
SSDEEP 12288:+CHNBT5iQt+QD+pkBFJsoFlTlNeg8jQHhpKISzAHEAmD:lNlpBr3d8j8H
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

569690

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

e-Payment Challan.Net.CMS4006975825.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

e-Payment Challan.Net.CMS4006975825.exe

mscoree

dotnet