NewTextDocumentmod[.]zip

General

Target
NewTextDocumentmod.zip
Size 3KB
Sample241210-sbc2nstkdk
SHA256 2f5d7f23e220019fff39d5835e9a743ffb876d6eeb9c7617bb57438e184da56d
MD5 b96a448ea75ac4ec204676d13c7a82ca
SHA1 04da3b20c0d3eed48bdb88ffbe6c61f05978df9d
SHA512 543b33a3314accd332f868d91a2c99bf9fb138355b165503792d36a8d870aacb3ef5c47d841096b8ee1b4f417a644d0af6fa2b7aadf8bf4eebf82f9e3c37fa4b
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New Text Document mod.exe

File Explorer

NewTextDocumentmod.zip

.zip 3KB
New Text Document mod.exe

.exe 8KB

NewTextDocumentmod.zip

SHA256 2f5d7f23e220019fff39d5835e9a743ffb876d6eeb9c7617bb57438e184da56d
MD5 b96a448ea75ac4ec204676d13c7a82ca
SHA1 04da3b20c0d3eed48bdb88ffbe6c61f05978df9d
SHA512 543b33a3314accd332f868d91a2c99bf9fb138355b165503792d36a8d870aacb3ef5c47d841096b8ee1b4f417a644d0af6fa2b7aadf8bf4eebf82f9e3c37fa4b
MD5 SHA1 SHA512

New Text Document mod.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 2e2e035ece4accdee838ecaacdc263fa526939597954d18d1320d73c8bf810c2
MD5 69994ff2f00eeca9335ccd502198e05b
SHA1 b13a15a5bea65b711b835ce8eccd2a699a99cead
SHA512 ced53147894ed2dfc980bcb50767d9734ba8021f85842a53bb4bb4c502d51b4e9884f5f74c4dd2b70b53cafbe2441376675f7bd0f19bb20a3becb091a34fb9f3
SSDEEP 96:y7ov9wc1dN1Unh3EHJ40CUJCrQt0LpCBIW12nEtgpH9GIkQYQoBNw9fnmK5iLjTv:yZyTFJfCB20LsBIW12n/eIkQ2BNg5S1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

NewTextDocumentmod.zip

New Text Document mod.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

NewTextDocumentmod.zip

New Text Document mod.exe

mscoree

dotnet