Eaton PO-45150292964[.]7z

General

Target
Eaton PO-45150292964.7z
Size 290KB
Sample240417-lpc59scg7w
SHA256 6bcafef0253aaf74e0c13610ac60d5b166f1e408e78ac44f042ee627eb26ed60
MD5 b1378c703917aad2b39ac60a11ecac89
SHA1 0aaa571398b607d31048ef00636d94fa4a6deee2
SHA512 ab2648d4d1d6232a0f1e24634dbf672e84d622be76aa54e16249f33439d97434baf90441e3cc18898b0e2a71136a015543938fe8c6209d91c14f608359ec48d0
SSDEEP 6144:mnLPXIjd01wleZLrxuWYGltmsUdNLPt5Gd7q7X0PBkQ1HRm:mLPIjWdraGl01dpPtG70X8Rm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Eaton PO-45150292964.exe

File Explorer

Eaton PO-45150292964.7z

.7z 290KB
Eaton PO-45150292964.exe

.exe 554KB

Eaton PO-45150292964.7z

SHA256 6bcafef0253aaf74e0c13610ac60d5b166f1e408e78ac44f042ee627eb26ed60
MD5 b1378c703917aad2b39ac60a11ecac89
SHA1 0aaa571398b607d31048ef00636d94fa4a6deee2
SHA512 ab2648d4d1d6232a0f1e24634dbf672e84d622be76aa54e16249f33439d97434baf90441e3cc18898b0e2a71136a015543938fe8c6209d91c14f608359ec48d0
SSDEEP 6144:mnLPXIjd01wleZLrxuWYGltmsUdNLPt5Gd7q7X0PBkQ1HRm:mLPIjWdraGl01dpPtG70X8Rm
MD5 SHA1 SHA512 SSDEEP

Eaton PO-45150292964.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8bbfa40764eabafad6f90d973784f343b8d7146689f4fd4384da26935b2bca5e
MD5 3a64b763c78291700bd114bfc3ecdde3
SHA1 7260be2d4cf3fbcf231e94a84c8f3cf252163c89
SHA512 87bdf6073e722cca6919d3b63a2483d4066388762baf127e10d347fdc1f9c04d168df63d858557a864f508160f43935635c11b7910fafac5c82f6f661363b9e0
SSDEEP 12288:bPOq1+u42964kZGQLd6yG6I+GAdP7r9r/+pppppppppppppppppppppppppppppb:bPdlMRZGyd9Z1q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

356366

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Eaton PO-45150292964.7z

Eaton PO-45150292964.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Eaton PO-45150292964.7z

Eaton PO-45150292964.exe

mscoree

dotnet