19284564528[.]zip | Triage™

General

Target
19284564528.zip
Size 884KB
Sample241010-fx1zeaybjf
SHA256 88c5e6caa9880e682f748b55da70450279adf5d568bbf72a1522a39db199212f
MD5 6899cd58a6f22f7f087f1126c4eb7745
SHA1 70885ca8e9605d87b6390e73935145e4d3224494
SHA512 77907697000ca1a44e080f5f3ad47b57873c25d0ad127cce44daf1f54cff1578a817f667a391929e6a9ae53eee6e80b205c1d2bb8b7ac341cd85ed5068e47f87
SSDEEP 24576:2VMqJ88vJMJT1cPPcJdd0WoR4FUHwOfRaGtUBmzrVamwrnPKmHcK+cf:2VMqJ88vJMJ1H0U6HwOfAvErMLPKG1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/PROFORMA INVOICE.exe

File Explorer

19284564528.zip

.zip 884KB
ccdf54b8450d34d8c6a114598278a88b1807d6c5e447f45b746acc14193e773a

.rar 884KB
PROFORMA INVOICE.exe

.exe 982KB

19284564528.zip

SHA256 88c5e6caa9880e682f748b55da70450279adf5d568bbf72a1522a39db199212f
MD5 6899cd58a6f22f7f087f1126c4eb7745
SHA1 70885ca8e9605d87b6390e73935145e4d3224494
SHA512 77907697000ca1a44e080f5f3ad47b57873c25d0ad127cce44daf1f54cff1578a817f667a391929e6a9ae53eee6e80b205c1d2bb8b7ac341cd85ed5068e47f87
SSDEEP 24576:2VMqJ88vJMJT1cPPcJdd0WoR4FUHwOfRaGtUBmzrVamwrnPKmHcK+cf:2VMqJ88vJMJ1H0U6HwOfAvErMLPKG1
MD5 SHA1 SHA512 SSDEEP

Password

infected

PROFORMA INVOICE.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5489a717a23f4b7e2f250429554bd8a3d744970e1bfabe2162c9eb2fa8c04df8
MD5 89768b71499c0eb974853e8e3f0cf5c4
SHA1 be5b1ac72323e8e92643d3e0804d83b902ba486b
SHA512 badad67ac5109fe02d03f6685329ca30a057eb7b07706a1508854f86fd1339d578147e5beee0e084dc7eb6046288da26aefdbfea4e222eda005205307d962654
SSDEEP 24576:gWTx232DgTe6ATI2Kw5JdnFjXX7juCCmOhsN:jAV3ATIts1VXPuBh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1001530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

19284564528.zip

ccdf54b8450d34d8c6a114598278a88b1807d6c5e447f45b746acc14193e773a

PROFORMA INVOICE.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

19284564528.zip

ccdf54b8450d34d8c6a114598278a88b1807d6c5e447f45b746acc14193e773a

PROFORMA INVOICE.exe

mscoree

dotnet