01072024_1603_Saddnotoem[.]zip

General

Target
01072024_1603_Saddnotoem.zip
Size 53KB
Sample240701-the1aasbrm
SHA256 0eed0bafa30d9c8c2a6b3e84edf43f6801d40c4a52aa8a3e719d8002a1480028
MD5 cd04ca60eb5ed6e4e43576cddb1d1212
SHA1 1334387be369acb2c9f767992b32a483305bd55f
SHA512 4150579becca322c3406aa9dfbc652849cb49b57c987cda1c3376317e25a71c1c0b7830a7e511e7dd3c2e3ab9766ab6970019c1975dd8bf92511cb91fd65da7b
SSDEEP 1536:f4lR1u7pDConHRwT70+tpjmWnAMeABHZdKx:dlC6mtpi+JeA97Kx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Saddnotoem.exe

File Explorer

01072024_1603_Saddnotoem.zip

.zip 53KB
Saddnotoem.exe

.exe 126KB

01072024_1603_Saddnotoem.zip

SHA256 0eed0bafa30d9c8c2a6b3e84edf43f6801d40c4a52aa8a3e719d8002a1480028
MD5 cd04ca60eb5ed6e4e43576cddb1d1212
SHA1 1334387be369acb2c9f767992b32a483305bd55f
SHA512 4150579becca322c3406aa9dfbc652849cb49b57c987cda1c3376317e25a71c1c0b7830a7e511e7dd3c2e3ab9766ab6970019c1975dd8bf92511cb91fd65da7b
SSDEEP 1536:f4lR1u7pDConHRwT70+tpjmWnAMeABHZdKx:dlC6mtpi+JeA97Kx
MD5 SHA1 SHA512 SSDEEP

Password

infected

Saddnotoem.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 43ed49ed79554bc575a7a4950af6c0b1cbe4cd296e594d05ded747f497c3b452
MD5 02ab465a87ea05cddde4391420ee64ed
SHA1 e504e5a4fc27569d9f6e00b32bdc3b267871096f
SHA512 be9fd6b9681c871f5818b45c51684f584dc6eed981e45f3d6dd0f61d5ad0a08eee91eda7713fcc0fef92d77866d9708e64039b44b8874eef47b4c2494c644659
SSDEEP 1536:i3DwqI9+dQCNBxhp9mvFPyowXsxq7OFYwT3JTvlO2iIdRzDGm3m8iT2ZuSXvmG60:yDwqIgJhPmvFPyJOnJTvliIdRn2LaK2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

136510

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB paths

C:\Users\Administrator\Desktop\Outputs\Saddnotoem.pdb

01072024_1603_Saddnotoem.zip

Saddnotoem.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

01072024_1603_Saddnotoem.zip

Saddnotoem.exe

mscoree

dotnet