PO_CW00402902400429[.]rar

General

Target
PO_CW00402902400429.rar
Size 532KB
Sample240723-nlkr2sthjk
SHA256 0785f5ce5fc16abdd98282c52faf8f46f69bc41785c02e5138373411ef6fa663
MD5 1c3bd1958039391e6417819de59c7a8b
SHA1 b924b7320e4c7106c06eb0aebf4b8b3f8b8996c9
SHA512 2040d6e7855f62526cc171e8ba3845cd7b72dc39cd4697febe9bbbeb0da99766cabafbeebfbe4a78b7e41d5acfd74d4af4361361f52895de71a3db8cd11107f1
SSDEEP 12288:7lQecgtK+/v7kodzrAEto4eOi2NkmqyxSZKWePAPf:hQTgM+l/AEC5WNumSZKWePU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO_CW00402902400429.exe

File Explorer

PO_CW00402902400429.rar

.rar 532KB
PO_CW00402902400429.exe

.exe 1.5MB

PO_CW00402902400429.rar

SHA256 0785f5ce5fc16abdd98282c52faf8f46f69bc41785c02e5138373411ef6fa663
MD5 1c3bd1958039391e6417819de59c7a8b
SHA1 b924b7320e4c7106c06eb0aebf4b8b3f8b8996c9
SHA512 2040d6e7855f62526cc171e8ba3845cd7b72dc39cd4697febe9bbbeb0da99766cabafbeebfbe4a78b7e41d5acfd74d4af4361361f52895de71a3db8cd11107f1
SSDEEP 12288:7lQecgtK+/v7kodzrAEto4eOi2NkmqyxSZKWePAPf:hQTgM+l/AEC5WNumSZKWePU
MD5 SHA1 SHA512 SSDEEP

PO_CW00402902400429.exe

SHA256 e7b39d439760b443b269a4c05aff708866ed9f6bff5e66d91b9316523a312998
MD5 f6b03349d643dd6a72fdc3e12fd638bd
SHA1 80d9f410f72e19b15b3d8434b4772cc7c7d5a05b
SHA512 3cd82c56b5bf2c77ab2304d91cc15f580919c882d7a22766af9bc6e437d028b98a9257b92fadb3bddf635b4f5b486ae0d850dd358e8ede892dbcbb1b25923a2b
SSDEEP 12288:a2rXmCLnKOtnRq47rUl2jZ7GwVdkC9bq1AaAE:1m8ttRProK7G8dkC9GHJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing