300283ba8da7125158564e591e688d3cc473695869efd5481bb853b8fd40b479

General

Target
300283ba8da7125158564e591e688d3cc473695869efd5481bb853b8fd40b479
Size 169KB
Sample241114-kx8rgawkcw
SHA256 300283ba8da7125158564e591e688d3cc473695869efd5481bb853b8fd40b479
MD5 3552e39a925c73d39b425786bd952067
SHA1 2c006ab56e5baa51912e64192b831a10f985a4c9
SHA512 6fc5eb232aa7084da624a5f451315bc696ba56aca1f036b04496e3330732ed6123bbb47af3070d0a68d0f52021816b737a04b5316c0c46438aa7e4caef712f85
SSDEEP 3072:hwflMmlIAGJ88xU1zYNih0FNplQOXjmOpcFx9omvlaaWgH7PMoxLwP:qNMmV8K1zY8uF3KOXEF5vlJ70oaP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Objednávka_(PO327010)_SLOVIZOL_S.R.O.exe

File Explorer

300283ba8da7125158564e591e688d3cc473695869efd5481bb853b8fd40b479

.zip 169KB
Objednávka_(PO327010)_SLOVIZOL_S.R.O.iso

.iso 358KB
Objednávka_(PO327010)_SLOVIZOL_S.R.O.exe

.exe 297KB

300283ba8da7125158564e591e688d3cc473695869efd5481bb853b8fd40b479

SHA256 300283ba8da7125158564e591e688d3cc473695869efd5481bb853b8fd40b479
MD5 3552e39a925c73d39b425786bd952067
SHA1 2c006ab56e5baa51912e64192b831a10f985a4c9
SHA512 6fc5eb232aa7084da624a5f451315bc696ba56aca1f036b04496e3330732ed6123bbb47af3070d0a68d0f52021816b737a04b5316c0c46438aa7e4caef712f85
SSDEEP 3072:hwflMmlIAGJ88xU1zYNih0FNplQOXjmOpcFx9omvlaaWgH7PMoxLwP:qNMmV8K1zY8uF3KOXEF5vlJ70oaP
MD5 SHA1 SHA512 SSDEEP

Objednávka_(PO327010)_SLOVIZOL_S.R.O.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d59042fb9666d5a2fcb62371be2ab5c51b708f27db5711659d6b6d54e261741e
MD5 f2e32e33daa66e9cd593d80b9c40e82f
SHA1 824c23212249c7fda010e3c5895252f62b1ffdd2
SHA512 d6653a03cfba452a4441639e9c35d974675576d786bf19e7b3e96aeb01c61200e2c758fb5fb4ac637111b93fa5e1bfea199623c82333987a54bcfb00cd3cc218
SSDEEP 3072:hhEhB7dX8JhdSFETqgcFKy3owG9ih0JNplQMXj8Orctx9oQvl4aWgV7PXr1S7XWP:EhHodSFUdSLuJ3KMX8tVvl57v
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

241438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Nov13.pdb

300283ba8da7125158564e591e688d3cc473695869efd5481bb853b8fd40b479

Objednávka_(PO327010)_SLOVIZOL_S.R.O.iso

Objednávka_(PO327010)_SLOVIZOL_S.R.O.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

300283ba8da7125158564e591e688d3cc473695869efd5481bb853b8fd40b479

Objednávka_(PO327010)_SLOVIZOL_S.R.O.iso

Objednávka_(PO327010)_SLOVIZOL_S.R.O.exe

mscoree

dotnet