7648f2786fa6631ff3a5af588c84a58741844901235c80a4e640ec4640db63ec[.]zip

General

Target
7648f2786fa6631ff3a5af588c84a58741844901235c80a4e640ec4640db63ec.zip
Size 652KB
Sample240607-b8f16agg43
SHA256 7648f2786fa6631ff3a5af588c84a58741844901235c80a4e640ec4640db63ec
MD5 ff3b47dc4604c725c7ee1606dd0d4f07
SHA1 1b83ec77191b28093fb207a02a6bbaa7c8193e54
SHA512 9f5fffea8f061c35fca3f06a5d3a7e2150e64332c26814061b3fb408619226f4c8cd4782021ebb6dfbfc87d547156f9889cb07cca0ed549358bf4f9f19fbdb98
SSDEEP 12288:92ZOr1wJc3Rdu3WOr3/F0X8FPNELHmF/NIBFOh0zaLF4Xe:9B1wJce3/6X8FPgmNNoOh0zSF1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pwnp9WrC1wizLDM.exe

File Explorer

7648f2786fa6631ff3a5af588c84a58741844901235c80a4e640ec4640db63ec.zip

.zip 652KB
pwnp9WrC1wizLDM.exe

.exe 729KB

7648f2786fa6631ff3a5af588c84a58741844901235c80a4e640ec4640db63ec.zip

SHA256 7648f2786fa6631ff3a5af588c84a58741844901235c80a4e640ec4640db63ec
MD5 ff3b47dc4604c725c7ee1606dd0d4f07
SHA1 1b83ec77191b28093fb207a02a6bbaa7c8193e54
SHA512 9f5fffea8f061c35fca3f06a5d3a7e2150e64332c26814061b3fb408619226f4c8cd4782021ebb6dfbfc87d547156f9889cb07cca0ed549358bf4f9f19fbdb98
SSDEEP 12288:92ZOr1wJc3Rdu3WOr3/F0X8FPNELHmF/NIBFOh0zaLF4Xe:9B1wJce3/6X8FPgmNNoOh0zSF1
MD5 SHA1 SHA512 SSDEEP

pwnp9WrC1wizLDM.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0892cd1f8e39fcc175e75c553dc406819a278c39f56fe2d8236b7ef283af1125
MD5 dc88455c904d18a3c2b9b025e97c8af6
SHA1 2da1ab8da33cdee205dcdc6f56e96cf595cc23ba
SHA512 ca661f2b9038847ff2df7ec9bc64e88c8467e3435989387e01d64ffba4e72ba815feffa36d8fe6ca372ac960b8e425dadeecec011eb372a9355dbfbb7ec907de
SSDEEP 12288:0gsJxviqyJMuPJg39tu/4Oc1/t05azP1E/HmZt/inFQhEwdLah:ap5OhPJgf1/C5azPWmz/QQhEw1a
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

751910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ncYp.pdb

7648f2786fa6631ff3a5af588c84a58741844901235c80a4e640ec4640db63ec.zip

pwnp9WrC1wizLDM.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

7648f2786fa6631ff3a5af588c84a58741844901235c80a4e640ec4640db63ec.zip

pwnp9WrC1wizLDM.exe

mscoree

dotnet