27082024_1319_27082024_HBL NO[.] A809001229 Overdue Invoice[.]zip

General

Target
27082024_1319_27082024_HBL NO. A809001229 Overdue Invoice.zip
Size 565KB
Sample240827-qkr6vasemf
SHA256 6c3a46edb0a2e7e26291d27cb1265cd5e844593b4e5d36df1501f30cd7fcb855
MD5 e21e155b27134358bb3be4cbbab87b7d
SHA1 30bc7d8841bfd5aee1dfcbe33e1a4504b1762bb4
SHA512 efb21b961405914dda4f82ab75e42fbe062a211b9d84b9108a69599f30e1fab05d0754a7603e853185a816cdcb9df73f494906927c07f1a5bb5411b8a4e4ba06
SSDEEP 12288:ZYCvmNAW8wVDdJ8SKvJpnVCo44+IrHzo5vIaJC:ZYzN/8wVcSKhpVCdWHU9M
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

27082024_1319_27082024_HBL NO. A809001229 Overdue Invoice.zip

.zip 565KB
HBL NO. A809001229 Overdue Invoice.exe

.exe 616KB

27082024_1319_27082024_HBL NO. A809001229 Overdue Invoice.zip

SHA256 6c3a46edb0a2e7e26291d27cb1265cd5e844593b4e5d36df1501f30cd7fcb855
MD5 e21e155b27134358bb3be4cbbab87b7d
SHA1 30bc7d8841bfd5aee1dfcbe33e1a4504b1762bb4
SHA512 efb21b961405914dda4f82ab75e42fbe062a211b9d84b9108a69599f30e1fab05d0754a7603e853185a816cdcb9df73f494906927c07f1a5bb5411b8a4e4ba06
SSDEEP 12288:ZYCvmNAW8wVDdJ8SKvJpnVCo44+IrHzo5vIaJC:ZYzN/8wVcSKhpVCdWHU9M
MD5 SHA1 SHA512 SSDEEP

Password

infected

HBL NO. A809001229 Overdue Invoice.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 678004924997022281c09d32fb5aea4e95154e26f42891764628c74e2cd9a117
MD5 2e01a496376347f3110b695c161886a5
SHA1 c8beff4d44122a0d47c47ed30622b715afd7b8fc
SHA512 8ba39e08bbb323909b2ea657eecfb25211d7bb9160a6e32055e6845545b7cc67e6bc70b675129f819eb015fc90843c6a8b06f7d8c0d08cb444d956e5ef5dbaa0
SSDEEP 12288:IIMusyUDVFiHnINGKp+Hq7NHok4+IOMzpFrGoVXoW0DX:CfFiHINGKp+op/hWrGyXovX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Password

infected

PE Signature issue

Digest

2c:3f:8a:d6:5e:61:3a:30:e9:42:d9:d3:79:4b:5d:f8:b4:31:c7:a9:fc:0a:46:1c:80:88:ef:1b:72:22:21:cb

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

Minor OS version

0

Major OS version

4

Entry point

620530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

LRKV.pdb

27082024_1319_27082024_HBL NO. A809001229 Overdue Invoice.zip

HBL NO. A809001229 Overdue Invoice.exe

PE Signature issue

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

27082024_1319_27082024_HBL NO. A809001229 Overdue Invoice.zip

HBL NO. A809001229 Overdue Invoice.exe

PE Signature issue

mscoree

dotnet