f75cef2ca401714a35714b997352ec5c5034e37e2d8b58f38c493662ebf7b79a[.]zip

General

Target
f75cef2ca401714a35714b997352ec5c5034e37e2d8b58f38c493662ebf7b79a.zip
Size 641KB
Sample240604-cl8y4aad85
SHA256 f75cef2ca401714a35714b997352ec5c5034e37e2d8b58f38c493662ebf7b79a
MD5 e2acdace07abd4ac568bf9e3649e4c6b
SHA1 ea1511930fe447bd450b66696b2d8c698ccfc469
SHA512 daaaef6d636814b603fd6d1348854f534b3099453149775a56c33a88874b43fdb7c93dd4eb364f6a64aafcaee38b4ccf87aa008d73ea8546fb02c4ad17348f30
SSDEEP 12288:NAN7D9mwSZfwheS7WsPe3WkDTyKNco4RCtmJKZIQ8kt8mvcMI59ydNZ/B1KYaZxN:NAN7DQa7zm/D1co4Rm9SmyscVbydzp10
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase order.exe

File Explorer

f75cef2ca401714a35714b997352ec5c5034e37e2d8b58f38c493662ebf7b79a.zip

.zip 641KB
Purchase order.exe

.exe 844KB

f75cef2ca401714a35714b997352ec5c5034e37e2d8b58f38c493662ebf7b79a.zip

SHA256 f75cef2ca401714a35714b997352ec5c5034e37e2d8b58f38c493662ebf7b79a
MD5 e2acdace07abd4ac568bf9e3649e4c6b
SHA1 ea1511930fe447bd450b66696b2d8c698ccfc469
SHA512 daaaef6d636814b603fd6d1348854f534b3099453149775a56c33a88874b43fdb7c93dd4eb364f6a64aafcaee38b4ccf87aa008d73ea8546fb02c4ad17348f30
SSDEEP 12288:NAN7D9mwSZfwheS7WsPe3WkDTyKNco4RCtmJKZIQ8kt8mvcMI59ydNZ/B1KYaZxN:NAN7DQa7zm/D1co4Rm9SmyscVbydzp10
MD5 SHA1 SHA512 SSDEEP

Purchase order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f5a619550aab65a70f97f1128411ccd053444254ebb1df49d2d908c0e154d66b
MD5 7ed6256cb498f5a987aba753c51da2e8
SHA1 a34e2dc19b40abaff6572526a4432647fc99420f
SHA512 73f153ab884506394d14afdf142be5e759242cf6f852002ab7df3b7ee0c7249f50a963f57c973e95ee326304239ebb7576a2f8a6e6277451a17a736b002aa77b
SSDEEP 24576:N0DUY7TsfdHaoUR818CyPYBoi99yKe/s:SYisfp938XYoQ9yzU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

870686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

f75cef2ca401714a35714b997352ec5c5034e37e2d8b58f38c493662ebf7b79a.zip

Purchase order.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

f75cef2ca401714a35714b997352ec5c5034e37e2d8b58f38c493662ebf7b79a.zip

Purchase order.exe

mscoree

dotnet