Contract + Preview 24.05.zip
- SHA256 a68186f17773aa2ee0ce86b4fb2675f7688b238568b92606ed050cb540c69ec1
Password
Corel
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Corel Preview 2024/Instruction.docx
Resource
win10v2004-20240508-en
windows10-2004-x64
4 signatures
1800 seconds
General
- Target Contract + Preview 24.05.zip
- Size 60.7MB
- Sample240525-p45evacf5z
- SHA256 a68186f17773aa2ee0ce86b4fb2675f7688b238568b92606ed050cb540c69ec1
- MD5 88c6c412d811dbc3dd5fe11e7cb3b73c
- SHA1 05a76d4d2c62a0f71f52a4310aace441b1ab50c1
- SHA512 6573beb6285cbdb08b9bec70d70c688db3cb1d922b28d11e5e88bd5bfa692d34b4a395819f877c7b165d3ad3ef2ec7d0041d01df94b20040d6ce0a1123e5b737
- SSDEEP 1572864:T1YHI5YUXqJ21ki+cKvj5eb8hdy+FpA8ykDAYF51hzkI:TuHI5Fa+D+cKvAwRSIkI
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Corel Preview 2024/Offer.pdf.exe
File Explorer
-
Contract + Preview 24.05.zip.zip 60.7MB
-
Corel Preview 2024/Corel Preview 2024.mp4.mp453.9MB
-
Corel Preview 2024/Instruction.docx.docx.docx 88KB
-
Corel Preview 2024/Offer.pdf.exe.exe 71.1MB
Corel Preview 2024/Corel Preview 2024.mp4.mp4
- SHA256 7fa0fb01706d2a4790fd226975f76254ce0b003e9d655025d5596960cd06df93
- MD5 21f9dd32112ccef032ae6e901de818e8
- SHA1 650a5a06988d68685e5c4f2aa40464f9aa5aeb8e
- SHA512 c93f0e961d09a366cc2efbca9a87f7c67c5e6eec86c1a88e09a97b22a8898a87291d2b6b29660c35a0222e1153402e47b5d71126e96519be79965e4f6fc3b67f
- SSDEEP 1572864:bigki8k8qyU4Hof9+WlvAcdoNEB5G5z0uMKciYKQBeDA:WqyU4HsxlAcdoNE3YYuMIYKSeDA
- MD5 SHA1 SHA512 SSDEEP
Corel Preview 2024/Instruction.docx.docx
- SHA256 ed94e2b9956470c75aa9149d2ba1750e59b465f5771b2f3b2c27feaa3aa91c25
- MD5 c4a1ed8a268609a1c3fcf548545a8c10
- SHA1 32f55fdf7869d33e24ff8523485184baf91ff698
- SHA512 c0d7449e08512a2b3560b35e36b800704ae0de51e162fbf7dea0e9c595cff4ad6a1653ad72f83bc1f36e2bbb2382c2742c19ebf856b4eb475d29ba8af995a0c8
- SSDEEP 1536:Ll3JZn2c1+nW2iLUetVJxZmOSPdkZtHb9GKzsakB5+1zRCO/8EIMG4xGZX:Ll3vqnW2GhLxMBeZdb9GKIakB5+1zD/S
- MD5 SHA1 SHA512 SSDEEP
Corel Preview 2024/Offer.pdf.exe
- IMPHASH 85cddd6092e65c1a58dd1e6e9ab9fc63
- SHA256 0e336a760e9b1f32b38c52d0426f48648dec5b5a04f0766482a02a3f152c72fe
- MD5 8564c524e183138b878135bfd324a23e
- SHA1 65fa02423a7af2c25235d89d9cca4c1a2c6d0264
- SHA512 acc51199f6fb23e3dd728e679bcd1178f66547405bc32b6a2240660fdc272a6ea61650e5419d99b69e08a12442e51d1abd4ffbc5e4cb6a91b3d098850e77443f
- SSDEEP 98304:rEF26EMHK1hM4a3jReUhRny9EFhsViTu1D4KY7EpMWPCTbl5:hQRBXTTut4/oDPqb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Corel
Minor OS version
1
Major OS version
6
Entry point
5312
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
AddAtomA
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileA
CreateIoCompletionPort
CreateMutexA
CreateSemaphoreA
CreateThread
CreateWaitableTimerExW
DeleteAtom
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FindAtomA
FormatMessageA
FreeEnvironmentStringsW
GetAtomNameA
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetHandleInformation
GetLastError
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MultiByteToWideChar
OpenProcess
OutputDebugStringA
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseMutex
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetLastError
SetProcessAffinityMask
SetProcessPriorityBoost
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
__C_specific_handler
msvcrt
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthread
_beginthreadex
_cexit
_commode
_endthreadex
_errno
_fmode
_initterm
_lock
_memccpy
_onexit
_setjmp
_strdup
_ultoa
_unlock
abort
calloc
exit
fprintf
fputc
free
fwrite
localeconv
longjmp
malloc
memcpy
memmove
memset
printf
realloc
signal
strerror
strlen
strncmp
vfprintf
wcslen
Name
.text
Size
8.7MB
Virtual Size
8.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
528KB
Virtual Size
527KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
11.7MB
Virtual Size
11.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
455KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
78B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
201KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ