Position_Loader[.]zip

General

Target
Position_Loader.zip
Size 4.6MB
Sample240425-vmn97ada24
SHA256 ff4bd2041e8ea090c1649403cb3db8e0a31bd5b1299ff9033527308d9785fcb8
MD5 7877939fb7f6eeaf9a83b59b33a025bd
SHA1 f9d5c66cf65862e91189167ea71393a42880088a
SHA512 a7e7b98ea3a8c98fbdefc54445383bd986c7ef0f2ed702c35579bd00fc81d92f858a9df3401386364659936974697955932b6883156252201615f068a6a5d5e7
SSDEEP 98304:qUhpnB3nMb1nXzb92byIEr5IvL7LrWAiYT7JRfRHE6u:qmB3nMb1nXEyJGvv3xiYTlBU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Position.exe

File Explorer

Position_Loader.zip

.zip 4.6MB
Position.exe

.exe 4.8MB

Position_Loader.zip

SHA256 ff4bd2041e8ea090c1649403cb3db8e0a31bd5b1299ff9033527308d9785fcb8
MD5 7877939fb7f6eeaf9a83b59b33a025bd
SHA1 f9d5c66cf65862e91189167ea71393a42880088a
SHA512 a7e7b98ea3a8c98fbdefc54445383bd986c7ef0f2ed702c35579bd00fc81d92f858a9df3401386364659936974697955932b6883156252201615f068a6a5d5e7
SSDEEP 98304:qUhpnB3nMb1nXzb92byIEr5IvL7LrWAiYT7JRfRHE6u:qmB3nMb1nXEyJGvv3xiYTlBU
MD5 SHA1 SHA512 SSDEEP

Position.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 97a781c5442f8ad2d8d8d81d57ecf9e64675afd8eae3bb11bc1575879cd1c9b0
MD5 35db1343a0af2d2d32646f9ea9d1fd00
SHA1 34171d491a08e2e17a7893c5d7a5f74b46c38c55
SHA512 0e8b3a7f6513bd482cfdaa8d152b46f9d5a6dd9d8a2298f4da442e6ea6a848a6f3826e09aac8b8ab8cb027559ab164dd7431f89385f25ec1248cb3465539acaf
SSDEEP 98304:HXNpJF3nuXfljn5Z8rk+6r5wpR77rcAgOF/R7VrpU6jg:HZF3nuXfljAkJKp9nvgOFJBjjg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4902414

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Position.pdb

Position_Loader.zip

Position.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Position_Loader.zip

Position.exe

mscoree

dotnet