cd91a8ee7b116dc8b588c84aee6e5c888d771ed06c21309852d5c8a48cf99a4d[.]zip

General

Target
cd91a8ee7b116dc8b588c84aee6e5c888d771ed06c21309852d5c8a48cf99a4d.zip
Size 292KB
Sample240627-b2ws2ayekn
SHA256 cd91a8ee7b116dc8b588c84aee6e5c888d771ed06c21309852d5c8a48cf99a4d
MD5 c56a9cc22ad04dc3bdf92521c8b87e05
SHA1 aef16025568b11c1a46f382e69dd3cd4d07ccbef
SHA512 336aa61920d42de3038227e8d9f1b752032c3db314e3293ad90654d4ec5a6dc11246553dc9bc1060500bc7fef3771865fda68e05ea22c284bfd299f0cb749263
SSDEEP 6144:4zor+qlPEUBtBV5F/ARFpF6pnAaggo11o9M7OsxJL6t9ZXjT:68/tEUBrLdAuD/B9MVx9mfX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/new purchase order.exe

File Explorer

cd91a8ee7b116dc8b588c84aee6e5c888d771ed06c21309852d5c8a48cf99a4d.zip

.zip 292KB
new purchase order.exe

.exe 557KB

cd91a8ee7b116dc8b588c84aee6e5c888d771ed06c21309852d5c8a48cf99a4d.zip

SHA256 cd91a8ee7b116dc8b588c84aee6e5c888d771ed06c21309852d5c8a48cf99a4d
MD5 c56a9cc22ad04dc3bdf92521c8b87e05
SHA1 aef16025568b11c1a46f382e69dd3cd4d07ccbef
SHA512 336aa61920d42de3038227e8d9f1b752032c3db314e3293ad90654d4ec5a6dc11246553dc9bc1060500bc7fef3771865fda68e05ea22c284bfd299f0cb749263
SSDEEP 6144:4zor+qlPEUBtBV5F/ARFpF6pnAaggo11o9M7OsxJL6t9ZXjT:68/tEUBrLdAuD/B9MVx9mfX
MD5 SHA1 SHA512 SSDEEP

new purchase order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ee55bc0e99a3c75f30a2cee23b19f17a0b21860b052c9b51ecbc991388b27df6
MD5 17a110264eed416c74be361ce17698d1
SHA1 7ceb60ab6f0980d2451b46919b2e2a661fb050da
SHA512 fbc0ef2be617afd57bedd133e5bedfe780f19f4edf0e9c64c04651fde93a2656bc964166765a74ed1767b0b701c95b6787e6cbf6f0f3f52a1c7b13d0e96f485f
SSDEEP 12288:kajznV3Ni+Q5917k/z60nPfq5S2tVjeyzVE:njznNNi+Q5A/20Pfq5SieyzV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

575566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

cd91a8ee7b116dc8b588c84aee6e5c888d771ed06c21309852d5c8a48cf99a4d.zip

new purchase order.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

cd91a8ee7b116dc8b588c84aee6e5c888d771ed06c21309852d5c8a48cf99a4d.zip

new purchase order.exe

mscoree

dotnet