20012025_1536_20012025_new purchase order[.]zip

General

Target
20012025_1536_20012025_new purchase order.zip
Size 604KB
Sample250120-s1ypnswngr
SHA256 9cd4b798814b08b58f509435ad4b82e9eaf959a4adedfa79da997af925cde063
MD5 f2429892965c4f2a30e67dd4ab1e333b
SHA1 38be9f09349b23daa1d0f135cf61e356383aae9f
SHA512 2ba73dc87e4b1eb13b6b9c665ff7d080a7d10ecd9a68aa0d98a936eefebbbdaa0ff54c911d61a59c9004ce6def761c35bdde7a33aae2a8ba770b2d3ea9d103d7
SSDEEP 12288:qWqCIsEf6fMCBJG8QE9L0sbYDQCRBqLF7qXkl2uoE0aNkO9or8:qTCIDifMiVp8Sh7qXG27taNX9ow
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/new purchase order.exe

File Explorer

20012025_1536_20012025_new purchase order.zip

.zip 604KB
new purchase order.exe

.exe 1.2MB

20012025_1536_20012025_new purchase order.zip

SHA256 9cd4b798814b08b58f509435ad4b82e9eaf959a4adedfa79da997af925cde063
MD5 f2429892965c4f2a30e67dd4ab1e333b
SHA1 38be9f09349b23daa1d0f135cf61e356383aae9f
SHA512 2ba73dc87e4b1eb13b6b9c665ff7d080a7d10ecd9a68aa0d98a936eefebbbdaa0ff54c911d61a59c9004ce6def761c35bdde7a33aae2a8ba770b2d3ea9d103d7
SSDEEP 12288:qWqCIsEf6fMCBJG8QE9L0sbYDQCRBqLF7qXkl2uoE0aNkO9or8:qTCIDifMiVp8Sh7qXG27taNX9ow
MD5 SHA1 SHA512 SSDEEP

Password

infected

new purchase order.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4a2da03d10086812f5419222bf567097c63e71fe188d31d11a0a7e760c786e7b
MD5 bfa7bc691e3facc040246078528a03c4
SHA1 3b2781fda1c63b4ca93fd518cb4aebef4f378694
SHA512 f0672481b6b27faba9222330071a6457e2485022b34eded8bafa62498c693a69a05e7952eb598228d67600258eeb30dd1fd23775c0c3c59ecfd8bc18af56ab4c
SSDEEP 24576:7SexfdruTlj0wIeY9nM0gXq7TYA2rQtlHPI4U:mN1CjYQB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1263422

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

20012025_1536_20012025_new purchase order.zip

new purchase order.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

20012025_1536_20012025_new purchase order.zip

new purchase order.exe

mscoree

dotnet