PFAXtheXinvoiceXforXtheXXPaymentX[.]zip

General

Target
PFAXtheXinvoiceXforXtheXXPaymentX.zip
Size 532KB
Sample260521-snwpjsbv8z
SHA256 820516af4a7f2fdadf4f4dfe0fcd1b325cd13ac2d1ae79ab2f607e5d1dae3d0d
MD5 8bc12a0d30daa14f59e8b541a6837aa0
SHA1 7de91a481273a6f041a4e6432f5a7159dbb1e905
SHA512 219233a2fd179ad25578bd89f41f1cde6ec2e8e3b0cc1b377fa197695068afa8f0b3208a9591400a44481a2a718e5a76fc57bb1622cf5b14f5d210056e3e5209
SSDEEP 12288:vnuYosM7wsPlI6DJUAaNbOu1Q8c009vTOkYb+aY:Paf1haZOu1C9vTO8
TLSH
T1C5C43352CD2899C538C0DAB276746E721F40B74DC58B3ACC949CBF51B189E43CA2EED6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/003.exe

File Explorer

PFAXtheXinvoiceXforXtheXXPaymentX.zip

.zip 532KB
003.exe

.exe 567KB

PFAXtheXinvoiceXforXtheXXPaymentX.zip

SHA256 820516af4a7f2fdadf4f4dfe0fcd1b325cd13ac2d1ae79ab2f607e5d1dae3d0d
MD5 8bc12a0d30daa14f59e8b541a6837aa0
SHA1 7de91a481273a6f041a4e6432f5a7159dbb1e905
SHA512 219233a2fd179ad25578bd89f41f1cde6ec2e8e3b0cc1b377fa197695068afa8f0b3208a9591400a44481a2a718e5a76fc57bb1622cf5b14f5d210056e3e5209
SSDEEP 12288:vnuYosM7wsPlI6DJUAaNbOu1Q8c009vTOkYb+aY:Paf1haZOu1C9vTO8
TLSH
T1C5C43352CD2899C538C0DAB276746E721F40B74DC58B3ACC949CBF51B189E43CA2EED6
MD5 SHA1 SHA512 SSDEEP TLSH

003.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 cd4521a750a5be16379c573fda96dd95aa018eaa2029ed897586502bbe9b4ac5
MD5 3e6d8c01cf6f30ba50c9bf80d64249b2
SHA1 83cdb36f8f49901d504d4cef417c1a47cab8fa9d
SHA512 e84d7a37fe6f565a9c838cec593d254225aa9ee41ec35635bd6ed3016372ae0f82aced1f731e73dd42c5f289230f0e73aa4e828d12a95d84330bfbf686d6b820
SSDEEP 12288:rPUQF0/0sETNO6Sp7FO6ZQ8iy25XX8tVAUQKjYn:rLELh6gRO6ZW5XuAF
TLSH
T182C4130227BC973AF5BF6FB99262542603B6B1256281E60C4E9174CD7E6AFC24015FF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

586406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

GQxi.pdb

PFAXtheXinvoiceXforXtheXXPaymentX.zip

003.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

PFAXtheXinvoiceXforXtheXXPaymentX.zip

003.exe

mscoree

dotnet