122d62004392a5e26d7c14139972039c[.]bin

General

Target
122d62004392a5e26d7c14139972039c.bin
Size 299KB
Sample240519-bcxzssaa84
SHA256 fa23e65fbdee95c95938739e24e414095829e930615991e09ac7bc14b314cfb1
MD5 0bed3f4f000f5d95dc2987802bcc64af
SHA1 485f21a06caa9b08f66528907a1019e017ac3bc3
SHA512 5b269a4f2fd090b3fa43665c8d1b618b7997af859240b54bcaee0703ad730aa5808bbf6fe592cb7142918cfdfef748de03f0976ccc76968d61a81c66a241f97b
SSDEEP 6144:ROaIbLFrWp1gnk6ubC3xb8EV8d3mXKiyNI+/5b2N6dmFvgL:Ubb5GarZBQEWd3mXKiyLJ2N6deg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/shipment invoice.exe

File Explorer

122d62004392a5e26d7c14139972039c.bin

.zip 299KB
01b2950054c323053588464b4ccd6525e50f7a0de4616af228368b5e750a7d6b.7z

.7z 298KB
shipment invoice.exe

.exe 491KB

122d62004392a5e26d7c14139972039c.bin

SHA256 fa23e65fbdee95c95938739e24e414095829e930615991e09ac7bc14b314cfb1
MD5 0bed3f4f000f5d95dc2987802bcc64af
SHA1 485f21a06caa9b08f66528907a1019e017ac3bc3
SHA512 5b269a4f2fd090b3fa43665c8d1b618b7997af859240b54bcaee0703ad730aa5808bbf6fe592cb7142918cfdfef748de03f0976ccc76968d61a81c66a241f97b
SSDEEP 6144:ROaIbLFrWp1gnk6ubC3xb8EV8d3mXKiyNI+/5b2N6dmFvgL:Ubb5GarZBQEWd3mXKiyLJ2N6deg
MD5 SHA1 SHA512 SSDEEP

Password

infected

shipment invoice.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0c33297e293bffec0a5728c9553044a89b5b4ef7389b2a45fb460dbc0fdf838a
MD5 f01a3a3a9c895b320ef5cd519cf30eb3
SHA1 2bf14991c94bcc27043cfd0908d3c7df3064ae3a
SHA512 105b77f75ea1a3101e834744e310791a767529acf6c5bf949833b39efa9fe93b21a1062847e7ad15521fbedb7fe05c3c539b8c7e5cb7c51047091c213284b7e7
SSDEEP 12288:aM5FVuS1Ow2nQARhG3HYoOw8P7r9r/+ppppppppppppppppppppppppppppp0G:3AS1F2nBDFZ1q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

292782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

122d62004392a5e26d7c14139972039c.bin

01b2950054c323053588464b4ccd6525e50f7a0de4616af228368b5e750a7d6b.7z

shipment invoice.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

122d62004392a5e26d7c14139972039c.bin

01b2950054c323053588464b4ccd6525e50f7a0de4616af228368b5e750a7d6b.7z

shipment invoice.exe

mscoree

dotnet