0116627fbc1a3a3f6516259816efa8919866cbef48ae91af49eeee7f6d35e661[.]rar

General

Target
0116627fbc1a3a3f6516259816efa8919866cbef48ae91af49eeee7f6d35e661.rar
Size 26KB
Sample240728-lskphstekb
SHA256 0116627fbc1a3a3f6516259816efa8919866cbef48ae91af49eeee7f6d35e661
MD5 f47f8689fa1a0fd966b51b37e49b4df7
SHA1 b70ffec11257beba43f3301a60092f461d17aecd
SHA512 05ec7d36b1c32410da024633191f462dd90ff94af72c7eb534fd1b6b516663d190a58255dc38f03b9b8223caef1d6d5df03934e956510fd35068f891771fda7e
SSDEEP 384:6i+iMpKBy9pmRrj6nt8PDCKzBqkNiy+s8hfgk7LBKgfrFVbr4NE5vRm:6NiYKIIRrmnt8PDTi9s8q4tffhVbL5Jm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TNT Shipping Documents.exe

File Explorer

0116627fbc1a3a3f6516259816efa8919866cbef48ae91af49eeee7f6d35e661.rar

.rar 26KB
TNT Shipping Documents.exe

.exe 64KB

0116627fbc1a3a3f6516259816efa8919866cbef48ae91af49eeee7f6d35e661.rar

SHA256 0116627fbc1a3a3f6516259816efa8919866cbef48ae91af49eeee7f6d35e661
MD5 f47f8689fa1a0fd966b51b37e49b4df7
SHA1 b70ffec11257beba43f3301a60092f461d17aecd
SHA512 05ec7d36b1c32410da024633191f462dd90ff94af72c7eb534fd1b6b516663d190a58255dc38f03b9b8223caef1d6d5df03934e956510fd35068f891771fda7e
SSDEEP 384:6i+iMpKBy9pmRrj6nt8PDCKzBqkNiy+s8hfgk7LBKgfrFVbr4NE5vRm:6NiYKIIRrmnt8PDTi9s8q4tffhVbL5Jm
MD5 SHA1 SHA512 SSDEEP

TNT Shipping Documents.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5a4f747f9f958dade617f220d9cc236f53f31f1627e758a399c5ad30fd7eeda3
MD5 0fa0517e3da3d0e14ca73aa140573a37
SHA1 90b0c522ef09a57c9ba31a95db898115a810a0c2
SHA512 f5cc076c0402153396828cc996b59e5cb192de21d052c71b332902ea33ffbbb60a58a057cff236be9fd2a0453463ed4e8a9e901129be2bb93010c5e7bd784517
SSDEEP 1536:bJY/ssWIoJ8sGFz7dmPzc818U0Q8z/g5:vIoJ5GFHuzs/g5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

72514

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB paths

C:\Users\Admin2024\Desktop\Outputs\Doli.pdb

0116627fbc1a3a3f6516259816efa8919866cbef48ae91af49eeee7f6d35e661.rar

TNT Shipping Documents.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

0116627fbc1a3a3f6516259816efa8919866cbef48ae91af49eeee7f6d35e661.rar

TNT Shipping Documents.exe

mscoree

dotnet