ef514e4680b3e55be0b726d22fbf85ef[.]bin

General

Target
ef514e4680b3e55be0b726d22fbf85ef.bin
Size 647KB
Sample240614-dk6b9ashla
SHA256 9fad55147990d287d01a5a69a88a3ad245735c66b18cee0e47287b93a427884f
MD5 33222c489da4c637d1188006b41cd4b2
SHA1 35209f2731066e7b606d37d5bc7ac19b5fb11553
SHA512 55898de3d3b72ddd0b8233ed4a17e1935014db8bb96d135d9fee9df6ea0b9ee929144ac2c5e415f99e7719d9de8bb08a22231dd074948c822c93f9b2d5a9830b
SSDEEP 12288:on4pewOjqSAAj11UpvNfNFZGVo6Xp2r3f1BmaSXzHOOrn8/I4ju5BuSpSIUK3ebR:MjXjJhz8vpZGVo6Xp2rdOuOrn8KuS9zM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/FedEx_776288738390.exe

File Explorer

ef514e4680b3e55be0b726d22fbf85ef.bin

.zip 647KB
ba44c0b2695b4c7b34218756153ff78010fe431fc0704251f44bc750c3dfb43d.rar

.rar 647KB
FedEx_776288738390.exe

.exe 735KB

ef514e4680b3e55be0b726d22fbf85ef.bin

SHA256 9fad55147990d287d01a5a69a88a3ad245735c66b18cee0e47287b93a427884f
MD5 33222c489da4c637d1188006b41cd4b2
SHA1 35209f2731066e7b606d37d5bc7ac19b5fb11553
SHA512 55898de3d3b72ddd0b8233ed4a17e1935014db8bb96d135d9fee9df6ea0b9ee929144ac2c5e415f99e7719d9de8bb08a22231dd074948c822c93f9b2d5a9830b
SSDEEP 12288:on4pewOjqSAAj11UpvNfNFZGVo6Xp2r3f1BmaSXzHOOrn8/I4ju5BuSpSIUK3ebR:MjXjJhz8vpZGVo6Xp2rdOuOrn8KuS9zM
MD5 SHA1 SHA512 SSDEEP

Password

infected

FedEx_776288738390.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2de30a474f781d95cc74aad7ef55e65ad03f5a3ea89e60733e710167d46bc2be
MD5 ff96f15d151b6c271cb4284243c68cdf
SHA1 64213856b1b9e58dbfde55c57c592f6c97dfd13d
SHA512 686a6bfba4d4de4ddd347cd7c7ba6eed60aa350645ddb69f3af225263e73f6db17697f67ddfb9dd62ef32e29c36b252735ec4d0905827dd0476330a8bd8bbcf6
SSDEEP 12288:edXtfETpPO5JmjISb+OEp/ngBmWJdUXouQKTS5BGO0jxF3qX5gba3jK:ed92pSaLwngBmlXouQkO0jr36qa3jK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

752426

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ef514e4680b3e55be0b726d22fbf85ef.bin

ba44c0b2695b4c7b34218756153ff78010fe431fc0704251f44bc750c3dfb43d.rar

FedEx_776288738390.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

ef514e4680b3e55be0b726d22fbf85ef.bin

ba44c0b2695b4c7b34218756153ff78010fe431fc0704251f44bc750c3dfb43d.rar

FedEx_776288738390.exe

mscoree

dotnet