ORDER No[.] 201945[.]zip

General

Target
ORDER No. 201945.zip
Size 730KB
Sample250805-ps3f4ss1ev
SHA256 64335811f3d65455be2cb759ce21f0fe420abb4fa12ba4732606f18cd2cd9c92
MD5 5fa4afbff3be8ae360e491bf123f6c36
SHA1 a41842ee909aeb1b06e010a03c4c7938c04d851f
SHA512 1ac34e4e9bef8a91e09c031f254c9761366f8322c9ff44de1f71ba00de3562c607ad5d92c5f05014effe585899e96ab0eb0d49cd1f2d956399a8faf49f7fbe01
SSDEEP 12288:8D4SQecwjApj2kPH0ewCAf3CeLbdFMSoy18o9UzFRQvoXR7gUjB6Vdtl9lXv/Px:hecwjAVMU0BFMS1So92FRsWHM39lHp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ORDER No. 201945.exe

File Explorer

ORDER No. 201945.zip

.zip 730KB
ORDER No. 201945.exe

.exe 849KB

ORDER No. 201945.zip

SHA256 64335811f3d65455be2cb759ce21f0fe420abb4fa12ba4732606f18cd2cd9c92
MD5 5fa4afbff3be8ae360e491bf123f6c36
SHA1 a41842ee909aeb1b06e010a03c4c7938c04d851f
SHA512 1ac34e4e9bef8a91e09c031f254c9761366f8322c9ff44de1f71ba00de3562c607ad5d92c5f05014effe585899e96ab0eb0d49cd1f2d956399a8faf49f7fbe01
SSDEEP 12288:8D4SQecwjApj2kPH0ewCAf3CeLbdFMSoy18o9UzFRQvoXR7gUjB6Vdtl9lXv/Px:hecwjAVMU0BFMS1So92FRsWHM39lHp
MD5 SHA1 SHA512 SSDEEP

ORDER No. 201945.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ef2a54c5688d0e055fffd22394c168c81f80ec4a8ab33ceb87e70a6eddf97942
MD5 0dc0e153ff0d96dd3e163aa5577719b9
SHA1 9507b5a4e9260e3282c854f63a2e621e3eb746d0
SHA512 306fcdfb434dfcf514c6f467c17da55b792cab66f2d24556f829f4b2bd183f0b8e7d7cd71f62ebf85a6cf1a6b5b9df3e6b74fe9ea74069019157789ff7d41350
SSDEEP 24576:vtwHmSjABbu8wn/8yEdCUU8sAJV7r4k1QqO+/KI4S:vtUCu9n/8y6X4AJV78om+/KU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

875410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Uziu.pdb

ORDER No. 201945.zip

ORDER No. 201945.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

ORDER No. 201945.zip

ORDER No. 201945.exe

mscoree

dotnet