ACKNOWLEDGEMENT PENDING � PURCHASE ORDER[.]zip

General

Target
ACKNOWLEDGEMENT PENDING � PURCHASE ORDER.zip
Size 428KB
Sample250829-hpkcssgp3x
SHA256 a8b0e39c0d40dda93ccc0c817b6b924804b25b5ac343b2db2e1fb6658743af9d
MD5 bcf38baf0810096a64d1904911f8a923
SHA1 df27032fc783dcaaefb35e60a028ae2f4c2a4340
SHA512 1935f75f7dcb2c15e5f4ca1e7a48e6fb12b46d55916f4a5ef98d7c9ea7d2cf810ab2f46de60fbb3a5a67a6af5db9d1bfe6c1bc96874a348861f9f62b20d89cce
SSDEEP 6144:+XYn+9RVF0nRgsWivZdFlq+zNfPLh/c1jJ0+5VS0sETFHXBH4GSzws1J+hkpSMrw:+XYn+9R2gGlq+z5F41O4RYGSvWfpT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/o0J2gpevUhKJ4KQ.bat

File Explorer

ACKNOWLEDGEMENT PENDING � PURCHASE ORDER.zip

.zip 428KB
o0J2gpevUhKJ4KQ.bat

.exe 475KB

ACKNOWLEDGEMENT PENDING � PURCHASE ORDER.zip

SHA256 a8b0e39c0d40dda93ccc0c817b6b924804b25b5ac343b2db2e1fb6658743af9d
MD5 bcf38baf0810096a64d1904911f8a923
SHA1 df27032fc783dcaaefb35e60a028ae2f4c2a4340
SHA512 1935f75f7dcb2c15e5f4ca1e7a48e6fb12b46d55916f4a5ef98d7c9ea7d2cf810ab2f46de60fbb3a5a67a6af5db9d1bfe6c1bc96874a348861f9f62b20d89cce
SSDEEP 6144:+XYn+9RVF0nRgsWivZdFlq+zNfPLh/c1jJ0+5VS0sETFHXBH4GSzws1J+hkpSMrw:+XYn+9R2gGlq+z5F41O4RYGSvWfpT
MD5 SHA1 SHA512 SSDEEP

o0J2gpevUhKJ4KQ.bat

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 cc4eec67af1c944dec3427e604e4e098cce364ed1138469d51b264687ade358f
MD5 b580f1214e3ff3d37eddc5b37e6ccf70
SHA1 0fe687438cc2918a3e0d5e83da17ff36c58652c2
SHA512 7963f0722fe38479f22f1abbdb4e5e6f8798c1471dc793e6a7069c5f02a4123e2e89fed69918fbe5b618e2a04d0b82ec62f4e184db67482f4f76ae75d3d58203
SSDEEP 12288:r0OWDxVcetD2B5FTsE0/1OcLzhJKyI70gpbvPNe:SVce50sxdOcLVuQgprPN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

491666

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

uWiz.pdb

ACKNOWLEDGEMENT PENDING � PURCHASE ORDER.zip

o0J2gpevUhKJ4KQ.bat

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

ACKNOWLEDGEMENT PENDING � PURCHASE ORDER.zip

o0J2gpevUhKJ4KQ.bat

mscoree

dotnet