9405a1322f2ba6b5353621a54255aae77c37aca3aa25f93bdcd313f8e3716ca0
- SHA256 9405a1322f2ba6b5353621a54255aae77c37aca3aa25f93bdcd313f8e3716ca0
Behavioral task
behavioral1
Sample
Business Details.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Business Details.exe
Resource
win11-20260130-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
Design.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
Design.exe
Resource
win11-20260130-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral5
Sample
Invoice.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
10 signatures
150 seconds
General
- Target 9405a1322f2ba6b5353621a54255aae77c37aca3aa25f93bdcd313f8e3716ca0
- Size 9.6MB
- Sample260428-e6vnbadv51
- SHA256 9405a1322f2ba6b5353621a54255aae77c37aca3aa25f93bdcd313f8e3716ca0
- MD5 822ee4dc23862e9d66be4c9766fdc6e2
- SHA1 b85cfa4abda801fdcff20e662289c7713d24f282
- SHA512 dd3a676306e339088a6c7b656fef048505bed8baf2d8a87653fa04b5a1439a250aa8b4136ede58c4507a1ab4c30ecc08808580cded54b9c047cac2864ccee2b9
- SSDEEP 196608:52ZGx4+V9Jcr+CBpWZDbA+XTS7BESln58SSToV+vTM46t2cXR84MHqWTyjb:5iGx3LmrHgZAYW79WDo+vTM46t3R84Mi
- TLSH T165A63314B8F6C0AE1AED8DF894C930C09C24052EE325F6DE93D9FDF1DD3261A46AD946
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Business Details.exe themida static1/unpack001/Design.exe themida static1/unpack001/Invoice.exe themida - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Business Details.exe unpack001/Design.exe unpack001/Invoice.exe
File Explorer
-
9405a1322f2ba6b5353621a54255aae77c37aca3aa25f93bdcd313f8e3716ca0.zip 9.6MB
-
Business Details.exe.exe 3.3MB
-
Design.exe.exe 3.3MB
-
Invoice.exe.exe 3.1MB
Business Details.exe
- SHA256 5d75735ab852877729a360982e1bbf5e8e29c6cc094c9bba4dc628b0f287bf87
- MD5 f5f01d483549e3686cd4d6618cf32c06
- SHA1 e9019662af3c336206659efafacf87bb7e36cf00
- SHA512 577b5d9e35809b726c8f05995fc7920e46e95444d06c39c1bb0ec420cd70ae2e49587bc60b4e1944869e7877b661eb720a3ff32ae45bb38d28b5433a5c56dd9e
- SSDEEP 98304:TRzWqCrQ0GEtzz8/S0A5AprsO99Dx7Wy4p:TRaqCrFGOz8aN5MT93ha
- TLSH T1DBF5331FBD9682F3C6CEAC71125A1CF23C40893B51BCD708688D67EEDA0991FED68549
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5873752
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
41KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
5.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
Design.exe
- SHA256 ec181790ee28b2e443fea1929622fa22a19b061aaa43f888e536831fa848c2fc
- MD5 a0142ca1c11b0c38d5cf33eec00a6bf4
- SHA1 16f77a80af9313fd2a6ca486bca15060b3e019e6
- SHA512 03cf12e3a9c6b2fbe3a5648d315bb8e41da2e48e3d50631f56e3c3860e0eb289638b8f549200a7f93345587d1d9c476eef85dc4565a838f45e7ac0ea48b9354b
- SSDEEP 98304:EnRm6ECslrNmZF2S5g+5VpOZSYV36/BoKqPKx58k:EMnCstNmZF2S5p5SSKgoU3
- TLSH T14EF5332167E0AAE6C1E583342491F7053EE1C7A4EA7643F78947DC93BF0A2C5CDA3961
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5873752
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
41KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
5.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
generic
Invoice.exe
- SHA256 94e8fec242fcc69895cc0183e95834e837ef4da5fd9790a4bbefd0a2787af901
- MD5 7a8a4d4aa827d8a0cf796b537e26c992
- SHA1 a7f3455f1c9265f53d15d61fda7642160a0d8757
- SHA512 e6a7a47dd575aacad132a2139993fdca9643fd96f812c125157d897476e80fb056a2f4492c2df36c02015c940bdbc9e174a36684325f35915c71476eb73ca659
- SSDEEP 98304:6qsn9hO3hK/NvzqL9lbWdTJCwFN8LoPZZ:6rgRK55tCUmk
- TLSH T171E5338A10CBD5DBCD4C82F5F4C03E41AB18E10C157FAE654A0AA5C59D70DBEF0A3A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5668952
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
Size
41KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
5.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
3.1MB
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ