4kFSPCvmoj8Wsky[.]pdf[.]z

General

Target
4kFSPCvmoj8Wsky.pdf.z
Size 657KB
Sample240508-fllqcaee85
SHA256 a55f6703a810628e7295967b6be6753ac5922e9d0ec7cc9094f7205360f7c2c1
MD5 b72c5da057332d035aeed8856f3ea26a
SHA1 bc6a0fed3e3c8280002a8cb80b4038ac346885ab
SHA512 a1de029ac675d0e3d43242699297b4ff78202b3c65279821fd24114c1ddcab85ad56391e19ac3d7c73c7e50dfa806641bfa4aaecae789bcbeeee41ce8bab5296
SSDEEP 12288:48XHp0po+tJYOFdAvJTyFViItgiWWZSQZwCcWsrZSAmTjl9Xp1w:48XpCo+XX9qI6WcQZtcWAYPl9Xnw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4kFSPCvmoj8Wsky.exe

File Explorer

4kFSPCvmoj8Wsky.pdf.z

.rar 657KB
4kFSPCvmoj8Wsky.exe

.exe 710KB

4kFSPCvmoj8Wsky.pdf.z

SHA256 a55f6703a810628e7295967b6be6753ac5922e9d0ec7cc9094f7205360f7c2c1
MD5 b72c5da057332d035aeed8856f3ea26a
SHA1 bc6a0fed3e3c8280002a8cb80b4038ac346885ab
SHA512 a1de029ac675d0e3d43242699297b4ff78202b3c65279821fd24114c1ddcab85ad56391e19ac3d7c73c7e50dfa806641bfa4aaecae789bcbeeee41ce8bab5296
SSDEEP 12288:48XHp0po+tJYOFdAvJTyFViItgiWWZSQZwCcWsrZSAmTjl9Xp1w:48XpCo+XX9qI6WcQZtcWAYPl9Xnw
MD5 SHA1 SHA512 SSDEEP

4kFSPCvmoj8Wsky.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e4a398bfda61e5d4b2ed8551f4fbdfd070e992e777287b45c61537f4f5b7f875
MD5 9d80c25cf9972ed74681ca6aed3acc1f
SHA1 64c6c228bdaa1083e26558068d015f65249006ab
SHA512 8d1d5e66e793f4c952c070c8d3c6fa38ebc1963472494ee0be5e67f5f4072888a463411b777123e1c83176a80081fcec4c4ad660cfbe66de6f3b05eb0650c0e7
SSDEEP 12288:TpIu2iNj/SHBi04eCtS5irSne/iSfJ3GOG+UnaO+qpPyo2sU:P1cHBtGFrSnaiSfJ2OG+UnaO+gPKs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

732786

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gEkH.pdb

4kFSPCvmoj8Wsky.pdf.z

4kFSPCvmoj8Wsky.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

4kFSPCvmoj8Wsky.pdf.z

4kFSPCvmoj8Wsky.exe

mscoree

dotnet