6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c[.]zip

General

Target
6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c.zip
Size 631KB
Sample240608-jrmflsac7v
SHA256 6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c
MD5 e84fcf08ded1588ad1b236274c7afe5f
SHA1 fcbed67f2d859c663da27a663c54f663e40548f5
SHA512 b94d81e325a03037ab6894673de351aafb8bb0d57f8e5586a219ced4ae827688c29aed537735920950e8f0c30cd22416ecbf1fbae830f8dc20ce06da92b7664d
SSDEEP 12288:nG1r35IIGEYObAJlx13ycOjDvSnfIj3L9ewpf4ekefLOWLEF6wtkGIjbi+xwBq:nK35DG/OC3yNHKfIjtgzQBEXt3kyBq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO 23897 Order Request.exe

File Explorer

6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c.zip

.zip 631KB
PO 23897 Order Request.exe

.exe 679KB

6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c.zip

SHA256 6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c
MD5 e84fcf08ded1588ad1b236274c7afe5f
SHA1 fcbed67f2d859c663da27a663c54f663e40548f5
SHA512 b94d81e325a03037ab6894673de351aafb8bb0d57f8e5586a219ced4ae827688c29aed537735920950e8f0c30cd22416ecbf1fbae830f8dc20ce06da92b7664d
SSDEEP 12288:nG1r35IIGEYObAJlx13ycOjDvSnfIj3L9ewpf4ekefLOWLEF6wtkGIjbi+xwBq:nK35DG/OC3yNHKfIjtgzQBEXt3kyBq
MD5 SHA1 SHA512 SSDEEP

PO 23897 Order Request.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 38a05c98b7bd7131bc6d65dc7c5b2a68c63c63119a32012faf1981aa6f40a9c4
MD5 8cb919da2d28a2e7a35a14a16c2abad3
SHA1 ccb408f332fb889635bc79b67c4dc4c73560fd3c
SHA512 523d9c571c672cc5f852225bcccfb913a72255719f4c9760cee35d9ced4f907bf3d0842d9c96f732d5c50c1f16d0575f87475b721afdd8c85c655156b7139d5f
SSDEEP 12288:ubBPJwKcI45ssbyJzx17McOjlvS9fIx7LlsyVf48keZL0WLE3q0tpeZsTQi:gBhcvCsY7Mv5K5Ix7gB4/EntAmTQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

699970

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

YmDL.pdb

6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c.zip

PO 23897 Order Request.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c.zip

PO 23897 Order Request.exe

mscoree

dotnet