Veyhl new order - PO 351081[.]7z

General

Target
Veyhl new order - PO 351081.7z
Size 630KB
Sample240909-t1d6psybkl
SHA256 16f7ed92a89c49bd047aae5d809978a6d55f1344ca39dfe4a6444cab091d48ef
MD5 515f80901126cf39a1a88097c2d542cb
SHA1 8778e37fe4459dd66e944f7574ac1fd5722c2190
SHA512 349e8565d9cff76b39462d55ea189a5428fbe89559996629bcd8a259c6cd88f929283cd67c194375d7e7762599376c378ab78393fca65774c042e9260edb1153
SSDEEP 12288:ym6sUS1lQWYvaKXbGiQie8a8VFIZN6WryIuNfQSZmoS8RXoXM:ymlxi3QixdFIZNA3ZPFRoXM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Veyhl new order - PO 351081.exe

File Explorer

Veyhl new order - PO 351081.7z

.7z 630KB
Veyhl new order - PO 351081.exe

.exe 859KB

Veyhl new order - PO 351081.7z

SHA256 16f7ed92a89c49bd047aae5d809978a6d55f1344ca39dfe4a6444cab091d48ef
MD5 515f80901126cf39a1a88097c2d542cb
SHA1 8778e37fe4459dd66e944f7574ac1fd5722c2190
SHA512 349e8565d9cff76b39462d55ea189a5428fbe89559996629bcd8a259c6cd88f929283cd67c194375d7e7762599376c378ab78393fca65774c042e9260edb1153
SSDEEP 12288:ym6sUS1lQWYvaKXbGiQie8a8VFIZN6WryIuNfQSZmoS8RXoXM:ymlxi3QixdFIZNA3ZPFRoXM
MD5 SHA1 SHA512 SSDEEP

Veyhl new order - PO 351081.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8ccca04fe86f770d8057a7209a6d31da8df7bace6f4a3d8e04d5bbfefc2661f3
MD5 61136861ddae7d53a0165c710bab05fe
SHA1 3e001e090821562908369a797feb14da17199747
SHA512 0ecb011c573972f3ceef4ed12413f4f207094fb9d36daac3a727783058f7401946e678809f4ed436b8b54d0adec46f28c83df90a55bf588228d5e87769a67c23
SSDEEP 12288:qZ9sUz1S6QUxvBKXbGiQOp8j8VQaZrWOreSuNe9PE4Xbm9i72lGP7r9r/+pppppL:AVdeQO2CQaZrA5EdE4rmkEG1q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

668682

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

lilk.pdb

Veyhl new order - PO 351081.7z

Veyhl new order - PO 351081.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Veyhl new order - PO 351081.7z

Veyhl new order - PO 351081.exe

mscoree

dotnet