PAYMENT ADVICE[.]zip

General

Target
PAYMENT ADVICE.zip
Size 497KB
Sample250130-vxjsfsxpby
SHA256 9d33808bf0012c3e6d0364098a8a145b31ef21eef884480018b8a77a9f163070
MD5 0754a73bd9c22e6368541d74e7615ca9
SHA1 c93647395e64e52080243274aeb544ba72ac51a0
SHA512 315af3446e4c790cb0332540b63dd7d0fa30cf24afe484c172f6741a3524e2f93ccd23e392c9f3ba7ee8e526e438f5d5f32cc78c142f786a02b040c99076c2ef
SSDEEP 12288:hLjmXWg2XO8DthJ3lK2mF9vuCpdIofp+fufC7XvrQZPoKSk:1mGRXlPJlyvNuuKTvMloXk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT ADVICE.exe

File Explorer

PAYMENT ADVICE.zip

.zip 497KB
PAYMENT ADVICE.exe

.exe 579KB

PAYMENT ADVICE.zip

SHA256 9d33808bf0012c3e6d0364098a8a145b31ef21eef884480018b8a77a9f163070
MD5 0754a73bd9c22e6368541d74e7615ca9
SHA1 c93647395e64e52080243274aeb544ba72ac51a0
SHA512 315af3446e4c790cb0332540b63dd7d0fa30cf24afe484c172f6741a3524e2f93ccd23e392c9f3ba7ee8e526e438f5d5f32cc78c142f786a02b040c99076c2ef
SSDEEP 12288:hLjmXWg2XO8DthJ3lK2mF9vuCpdIofp+fufC7XvrQZPoKSk:1mGRXlPJlyvNuuKTvMloXk
MD5 SHA1 SHA512 SSDEEP

PAYMENT ADVICE.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1e1cda620f33f8a4e039351b55ea841fb09e0212ca2dd44cbbcd52fc88ef8f61
MD5 9faeb285e16254d0c3cfadd5155690a5
SHA1 30c90d3b6a3d077d6f6f66f1e93f96fc4e60c1dc
SHA512 93cebec713840af6b9405de890f5cb3bb5afc07f48d1b53f22b0269f6b05aa5e57b487d314751b9bddff2fddfd5ce8fb5d8e29af121c07c76401b59073865f2b
SSDEEP 6144:GorJyDt117h5r2PxZl/EwyiBiunOM3+HLYgWzFozdiKPRfE3W2b87wLDhfC7cPxY:GT8gwyTXMOHpKCzdiafX2/dC7cP3noo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

597178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

PAYMENT ADVICE.zip

PAYMENT ADVICE.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

PAYMENT ADVICE.zip

PAYMENT ADVICE.exe

mscoree

dotnet