13082024_1658_13082024_Proformapdf[.]gz

General

Target
13082024_1658_13082024_Proformapdf.gz
Size 896KB
Sample240813-vg754svgph
SHA256 537aface17aa6df726d93385184f5f4d1803cf3746790c3d80ff1feac8df052e
MD5 a945d0599011f097eef459db89b2297a
SHA1 0f58c2365fae6356d39e8c3d2a4603da757a8e91
SHA512 c98a73642ec144500ad379dbc1506c06f1df58a169fe3c49b1da5123697623f451a1b4978d4d9301c331eb1b778766b31082a90542accefb7910a048fc171857
SSDEEP 24576:hh8L6f/WSmeLXvggQF6KgoM7afnhM0g2PMk5tRl6ncW6EK:hh06f/WOLXvgt6Kg77a5M0g2P16ncW6z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Etkt9oJ08ZyhAlm.exe

File Explorer

13082024_1658_13082024_Proformapdf.gz

.rar 896KB
Etkt9oJ08ZyhAlm.exe

.exe 910KB

13082024_1658_13082024_Proformapdf.gz

SHA256 537aface17aa6df726d93385184f5f4d1803cf3746790c3d80ff1feac8df052e
MD5 a945d0599011f097eef459db89b2297a
SHA1 0f58c2365fae6356d39e8c3d2a4603da757a8e91
SHA512 c98a73642ec144500ad379dbc1506c06f1df58a169fe3c49b1da5123697623f451a1b4978d4d9301c331eb1b778766b31082a90542accefb7910a048fc171857
SSDEEP 24576:hh8L6f/WSmeLXvggQF6KgoM7afnhM0g2PMk5tRl6ncW6EK:hh06f/WOLXvgt6Kg77a5M0g2P16ncW6z
MD5 SHA1 SHA512 SSDEEP

Password

infected

Etkt9oJ08ZyhAlm.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 51aa6be003977c67c7eaf393b81af1e5ff9ad99850ce86ba7c3dafe7e12728c6
MD5 e93b72986bdf1856a3f407cbb948b5dd
SHA1 3e546f719a8c752429382d7c78747bfe96ac6c42
SHA512 7195283fdeec6479e6b0225a9ba3c95c430770173bf1148f1cd10f11a0183fe2082adf67849ceb2841f016bcf9af203268633295da8062ad18444a8b9c69ba9d
SSDEEP 24576:rBuYiVAVhw4b8TrquAD+xCyUpoPNOUEqgkQt+wUcVWVD:rBuYIgnbWrCD+xCyhVSdVi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

937118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

cocS.pdb

13082024_1658_13082024_Proformapdf.gz

Etkt9oJ08ZyhAlm.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

13082024_1658_13082024_Proformapdf.gz

Etkt9oJ08ZyhAlm.exe

mscoree

dotnet