PDAinvoice13DEC2023[.]r00

General

Target
PDAinvoice13DEC2023.r00
Size 605KB
Sample241005-ph3n5asgrj
SHA256 998a4a4bad4c7eaa65953f3a35589cfbe594765efc51e40ee29f20c65f0cdbc6
MD5 da1b2865864581d7c9cac5460cc23691
SHA1 8606b0ec551b6c131dc6ec0a524aa0ce9441ddfa
SHA512 abdeee3f30998fc3186aef1106c05041279959322acf7366e78c61ea86b5960e6810bba351874be63847e66a08a13196aa7736414f9b7c48c9f2772e0d454257
SSDEEP 12288:JqeqKPAr86ofWlHoN0S7yet1qZ3r6xYWYvgSqeKtnGLXxWnDecWS5:J7qKPAr5hHg0kP1s38jsFqtGLkecT5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/JQL6kZuWTNlfWaU.exe

File Explorer

PDAinvoice13DEC2023.r00

.rar 605KB
JQL6kZuWTNlfWaU.exe

.exe 883KB

PDAinvoice13DEC2023.r00

SHA256 998a4a4bad4c7eaa65953f3a35589cfbe594765efc51e40ee29f20c65f0cdbc6
MD5 da1b2865864581d7c9cac5460cc23691
SHA1 8606b0ec551b6c131dc6ec0a524aa0ce9441ddfa
SHA512 abdeee3f30998fc3186aef1106c05041279959322acf7366e78c61ea86b5960e6810bba351874be63847e66a08a13196aa7736414f9b7c48c9f2772e0d454257
SSDEEP 12288:JqeqKPAr86ofWlHoN0S7yet1qZ3r6xYWYvgSqeKtnGLXxWnDecWS5:J7qKPAr5hHg0kP1s38jsFqtGLkecT5
MD5 SHA1 SHA512 SSDEEP

JQL6kZuWTNlfWaU.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 392fd8412e2fb96a3a9c54cd0aa32cf6c3bea21432e1ee46690412580055c214
MD5 a04865955d96e4b5b7d0d4105fc7424f
SHA1 f7c4f4164659d7196d540708c071b5a5657d1afa
SHA512 6ed9adbd80df77e3d94be0fd347e87feafb2306fa666c3118c73d3d458379a29c9f3c65436c0f91478a963e72abc81e6d4d80959c00c876e69554d1f34d1e32a
SSDEEP 12288:V+ltcuLojtRy1KUfEFxGuRgOJcLmSbXfYkesJ27n:VotcMcAhfERgOJafJ2z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

909562

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

jSo.pdb

PDAinvoice13DEC2023.r00

JQL6kZuWTNlfWaU.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

PDAinvoice13DEC2023.r00

JQL6kZuWTNlfWaU.exe

mscoree

dotnet