250224-w9jtnaxqw7_pw_infected[.]zip

General

Target
250224-w9jtnaxqw7_pw_infected.zip
Size 16.9MB
Sample250301-w3c3jaykt8
SHA256 d7676e38029789eb42452b343315be2187696c7432c3923281e961010c1c3913
MD5 560392912801a789739dcfb266226f31
SHA1 503933de4c7205a07144f49560f636ea7afb5567
SHA512 ca0cc8fa00c8d58dd5cd5330b33ea499dada4334c3595111d3a960ce850cf89837c0b8923418ad05d60e6a4be549a494390f553484ee229b136bb4511bf92b17
SSDEEP 393216:WVXqfO5xKJtoBZoqKeIwVtfxvfYst1rhdn2tCS6cFl+DJLc7xOuMO:UXqfjWoqKiVJJLrhd2cS12d2OuMO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mega Spoofer perm and temp.exe

File Explorer

250224-w9jtnaxqw7_pw_infected.zip

.zip 16.9MB
Mega Spoofer perm and temp.exe

.exe 22.4MB

250224-w9jtnaxqw7_pw_infected.zip

SHA256 d7676e38029789eb42452b343315be2187696c7432c3923281e961010c1c3913
MD5 560392912801a789739dcfb266226f31
SHA1 503933de4c7205a07144f49560f636ea7afb5567
SHA512 ca0cc8fa00c8d58dd5cd5330b33ea499dada4334c3595111d3a960ce850cf89837c0b8923418ad05d60e6a4be549a494390f553484ee229b136bb4511bf92b17
SSDEEP 393216:WVXqfO5xKJtoBZoqKeIwVtfxvfYst1rhdn2tCS6cFl+DJLc7xOuMO:UXqfjWoqKiVJJLrhd2cS12d2OuMO
MD5 SHA1 SHA512 SSDEEP

Password

infected

Mega Spoofer perm and temp.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d850d741582546a3d0ea2ad5d25e0766781f315cd37e6c58f7262df571cd0c40
MD5 317c5fe16b5314d1921930e300d9ea39
SHA1 65eb02c735bbbf1faf212662539fbf88a00a271f
SHA512 31751379ad7f6c55d87e9a5c1f56e6211d515b7d9ae055af962ed6f9205f5abad302c2e47dd56325abff85327ec3b7f9a6cf76ed34b8cbe1da06549c622c7031
SSDEEP 49152:yIT4lj7Rl9HFoDi+3JK5CS2bV5IRtyrp63FDysl28Wvp/pUOmrscrdXuMIgqJ95+:yI6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

54578

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

250224-w9jtnaxqw7_pw_infected.zip

Mega Spoofer perm and temp.exe

mscoree

dotnet

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

250224-w9jtnaxqw7_pw_infected.zip

Mega Spoofer perm and temp.exe

mscoree

dotnet