23052024_1504_invoice0987654[.]lz

General

Target
23052024_1504_invoice0987654.lz
Size 235KB
Sample240523-sft6rafc2t
SHA256 e5d62e81a3f298bfb4ba4b758692f67c8d9a34847b3eab386d091bad4bed9d0d
MD5 5c4a15513bd0665b4c02f39721d760df
SHA1 6431073629b57eabd1f2ce6a5d2be0c93fc77dae
SHA512 090fff572435c5fa7f69979deb550c8860a2ad2fcbf960ecaff0f592de1993fbbddc77dc2a8255a9bca23070763f31e7cd381fc6a5b6adb9e66193e6a646cb73
SSDEEP 6144:IC57YR1AE4BLdrNPCVWo4VeXs4/ED1BmH:svAE4NdrBCwo4Ks4/21MH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/invoice0987654.scr

File Explorer

23052024_1504_invoice0987654.lz

.zip 235KB
invoice0987654.scr

.exe 333KB

23052024_1504_invoice0987654.lz

SHA256 e5d62e81a3f298bfb4ba4b758692f67c8d9a34847b3eab386d091bad4bed9d0d
MD5 5c4a15513bd0665b4c02f39721d760df
SHA1 6431073629b57eabd1f2ce6a5d2be0c93fc77dae
SHA512 090fff572435c5fa7f69979deb550c8860a2ad2fcbf960ecaff0f592de1993fbbddc77dc2a8255a9bca23070763f31e7cd381fc6a5b6adb9e66193e6a646cb73
SSDEEP 6144:IC57YR1AE4BLdrNPCVWo4VeXs4/ED1BmH:svAE4NdrBCwo4Ks4/21MH
MD5 SHA1 SHA512 SSDEEP

Password

infected

invoice0987654.scr

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e9a8f56f14f1462064e157b31c5ee78ab20aa3286b93c10510d289bf6ead813a
MD5 62644ce33485e2c954eec5689e97a625
SHA1 01e1d60ec8a2afc6a9b4adcfbcc70044eaae9c73
SHA512 e07cd3ecf0aa2c5c2171ba57f50f3839d250f03215c5b4db509e5d6a0e16c633af7656cd43daff8344ae54d04476d8f319bea8870d31dbbb2d8eb2cd5a089bed
SSDEEP 6144:/piN8u5w4pkvOE2o4xBC6tArvxHM4OgUfVcHe+TLQRRJ:/M/hpkv72LxBC6mrvxHM4OgUfVcHeH1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

346798

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

23052024_1504_invoice0987654.lz

invoice0987654.scr

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

23052024_1504_invoice0987654.lz

invoice0987654.scr

mscoree

dotnet