16072024_1552_16072024_RFQ Cylinder Block PO list and detailed Drawing videos[.]gz

General

Target
16072024_1552_16072024_RFQ Cylinder Block PO list and detailed Drawing videos.gz
Size 496KB
Sample240716-tbjd5asfqa
SHA256 084e3ee5624f02ff6dcfcf9ebaed1f159c9e728a2e227a72cf0f6b19f7303eee
MD5 678d72e0dc16d203a7f884ef94bd964c
SHA1 784c65ed936febdf50d72cf62630d42d81b21f55
SHA512 dbb8f826504ce38751179ed6058a56b106eb0b6bd945d4a8f7ef1d82b6f2cc6401345617d2960a8ef3a80406fad03a369d4a8add5ef87eacf41a430e30e1d75c
SSDEEP 12288:z9xVywwxlUGzTe1VlBt24pPiUFL60wqEg+xfOymqXNX8XJl2RZqH:xxdiU0e1V7tZAU00wqEgSfx9s32RG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sample

File Explorer

16072024_1552_16072024_RFQ Cylinder Block PO list and detailed Drawing videos.gz

.gz 496KB
sample

.exe 875KB

16072024_1552_16072024_RFQ Cylinder Block PO list and detailed Drawing videos.gz

SHA256 084e3ee5624f02ff6dcfcf9ebaed1f159c9e728a2e227a72cf0f6b19f7303eee
MD5 678d72e0dc16d203a7f884ef94bd964c
SHA1 784c65ed936febdf50d72cf62630d42d81b21f55
SHA512 dbb8f826504ce38751179ed6058a56b106eb0b6bd945d4a8f7ef1d82b6f2cc6401345617d2960a8ef3a80406fad03a369d4a8add5ef87eacf41a430e30e1d75c
SSDEEP 12288:z9xVywwxlUGzTe1VlBt24pPiUFL60wqEg+xfOymqXNX8XJl2RZqH:xxdiU0e1V7tZAU00wqEgSfx9s32RG
MD5 SHA1 SHA512 SSDEEP

Password

infected

sample

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 71f697fbfa6976c3bac86e640c707e329826f2443aceb23121635e84ac7c3479
MD5 b29eb1b413376848dc700b96a393ab98
SHA1 26b86ed9263feae50c905fd8aac0ba6257cbbd14
SHA512 e88673ea821df08febed19f9f22df23eb4d1c95db6ca9e44c405f0d30cf8d7059fae59590ed032a63643fbce827a97e8c4e2f6c7833e9c43da3b8e215e1f772c
SSDEEP 12288:YdbUDRl8U+i+U7o9l6eZi/0K+GKS8Dk3M1DgteFpLXV:MalWi+U7Ylc/H+A8AcRFpLX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

834494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

16072024_1552_16072024_RFQ Cylinder Block PO list and detailed Drawing videos.gz

sample

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

16072024_1552_16072024_RFQ Cylinder Block PO list and detailed Drawing videos.gz

sample

mscoree

dotnet