0cc1bc4b7139f2286801471a0016a6b0e48317e4406536bb9476cc50ae94ffff[.]zip

General

Target
0cc1bc4b7139f2286801471a0016a6b0e48317e4406536bb9476cc50ae94ffff.zip
Size 297KB
Sample240612-bewjraxbrm
SHA256 0cc1bc4b7139f2286801471a0016a6b0e48317e4406536bb9476cc50ae94ffff
MD5 f48f7859c0d9df900bbb6a5861f7adc3
SHA1 59f74adca2eb58283d25b66fe22e887604d82919
SHA512 c1d631b7947b8ac5a5b293a2cfa08d3dfd908d17556e76ddfc8dcebb376e65227f4c692d39f3363a05ca204c5cff8f36df611051657af425565e72791497b93e
SSDEEP 6144:l63kdvRAwBF/H+oaM7Uq9RN979dGlxmVwyqzPlxNHdP98:6CZAap+ojd9RnzGbmVwyq7O
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order Details.exe

File Explorer

0cc1bc4b7139f2286801471a0016a6b0e48317e4406536bb9476cc50ae94ffff.zip

.zip 297KB
Order Details.exe

.exe 491KB

0cc1bc4b7139f2286801471a0016a6b0e48317e4406536bb9476cc50ae94ffff.zip

SHA256 0cc1bc4b7139f2286801471a0016a6b0e48317e4406536bb9476cc50ae94ffff
MD5 f48f7859c0d9df900bbb6a5861f7adc3
SHA1 59f74adca2eb58283d25b66fe22e887604d82919
SHA512 c1d631b7947b8ac5a5b293a2cfa08d3dfd908d17556e76ddfc8dcebb376e65227f4c692d39f3363a05ca204c5cff8f36df611051657af425565e72791497b93e
SSDEEP 6144:l63kdvRAwBF/H+oaM7Uq9RN979dGlxmVwyqzPlxNHdP98:6CZAap+ojd9RnzGbmVwyq7O
MD5 SHA1 SHA512 SSDEEP

Order Details.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f11926ecacbde795532e439b01e0a422d6070b14c03c15ce0c854962aa4b044a
MD5 4e1ff03aee8a2647a2c5ef57a2d9919f
SHA1 6c0c8db2475fedfbb210939beb33cf5d41df8c5b
SHA512 7c5ea001525432b12d07a9d555cd9bb3941f986e48fa0ef9656d670521931fc1c2b526e73122d7cbcd1812f47886af0d9ed5777d0d3d639b6c754ed80864cf89
SSDEEP 12288:ttdZ5SqgWxzCl7lCQVH9x7Uz6drNXX4u+f0n2B1/Q:XdZ5S+xzCrCQVdpUCr9Iu+f0n2B1Y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

508350

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

0cc1bc4b7139f2286801471a0016a6b0e48317e4406536bb9476cc50ae94ffff.zip

Order Details.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

0cc1bc4b7139f2286801471a0016a6b0e48317e4406536bb9476cc50ae94ffff.zip

Order Details.exe

mscoree

dotnet