48d5512fb8168c9b715bc2c5c047b474dd9c61a6a314bafe389a269e7923abf4[.]zip

General

Target
48d5512fb8168c9b715bc2c5c047b474dd9c61a6a314bafe389a269e7923abf4.zip
Size 663KB
Sample241002-bl6cjatdla
SHA256 48d5512fb8168c9b715bc2c5c047b474dd9c61a6a314bafe389a269e7923abf4
MD5 1b6cbbf327af4ce6ef3d328aeac5d91f
SHA1 584523a9181ae9c5384d767823c832d1e2f70577
SHA512 406e3d7952b1d5f21b4757799e5f16571f472127295f59e1a97ad67c70ea8b0cd31b2910f24726e62e0d701a97d616009ea327459e6d3da29535b02cfde2dbd5
SSDEEP 12288:OTS5n4Gc4AO3JDWmQ//DkePo+iknW4JoMAFbe5OE3N1z97AvZTq/l7LDwtNl:OTSyGrzWmQ//DkCniGW4F/d7AvZTq9XQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order 007823-PO# 005307.exe

File Explorer

48d5512fb8168c9b715bc2c5c047b474dd9c61a6a314bafe389a269e7923abf4.zip

.zip 663KB
Purchase Order 007823-PO# 005307.exe

.exe 745KB

48d5512fb8168c9b715bc2c5c047b474dd9c61a6a314bafe389a269e7923abf4.zip

SHA256 48d5512fb8168c9b715bc2c5c047b474dd9c61a6a314bafe389a269e7923abf4
MD5 1b6cbbf327af4ce6ef3d328aeac5d91f
SHA1 584523a9181ae9c5384d767823c832d1e2f70577
SHA512 406e3d7952b1d5f21b4757799e5f16571f472127295f59e1a97ad67c70ea8b0cd31b2910f24726e62e0d701a97d616009ea327459e6d3da29535b02cfde2dbd5
SSDEEP 12288:OTS5n4Gc4AO3JDWmQ//DkePo+iknW4JoMAFbe5OE3N1z97AvZTq/l7LDwtNl:OTSyGrzWmQ//DkCniGW4F/d7AvZTq9XQ
MD5 SHA1 SHA512 SSDEEP

Purchase Order 007823-PO# 005307.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2095af004e76f0cf7243b68e868eeb3b9c8c157d632aa785a87a93addf3b75fc
MD5 89b1330440f5e3cc7fdf662981760845
SHA1 39484bf19c50d51022b3f90361bfd048b1ee1df6
SHA512 2db2b4de6eb9bda9b1d93d4e14417a31193cdcebd4736b07a49d0d72e34244d166285107eda6968c3b781e20e7302a2d93b2e5a3df93a6b3217e6a3d426bc1e3
SSDEEP 12288:a4Gc47cJDImS//BEQPo+wknW47+O7dwKOFxFp/xb0rA5CXpLJ+U3T:9GrSImS//BEknwGW47+OZFOFH0rA5yJ+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

768494

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

XpkT.pdb

48d5512fb8168c9b715bc2c5c047b474dd9c61a6a314bafe389a269e7923abf4.zip

Purchase Order 007823-PO# 005307.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

48d5512fb8168c9b715bc2c5c047b474dd9c61a6a314bafe389a269e7923abf4.zip

Purchase Order 007823-PO# 005307.exe

mscoree

dotnet