‎⁨تبيعه با فلوس nzf⁩[.]zip

General

Target
‎⁨تبيعه با فلوس nzf⁩.zip
Size 621KB
Sample260723-wp1lnstgrh
SHA256 d9140bf5ee9495f06bc8a3c37ff3b893c0a40832424e0bd224a7d0b8645c2d75
MD5 b6ab37b4fee69419a0716928f490eed0
SHA1 da8d19fda2e086c9a85531e6174f588000a369b9
SHA512 724cc1f27215248a4ccf0fb362907d2fd9671b98c937d0ecd0a5faa817a2c7aeaf5c0205ba98cda86e3738a0a561bd883f5015cfc2d7b9009e6dd6f506c3880a
SSDEEP 12288:CbaQq6Tfwj5cMqXmnTZcYcvHNmejUsL0cI1znpNEqqarXk9/SL2dTw+bJ8:CbaQqsucMoOWfnm1L4vaQdxJ8
TLSH
T125D423125CA5F5C7C4BB9EF63DA88B144AAC9D5BBA69816B03AAF1834B0CF11760CD05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/تبيعه با فلوس nzf/CREATIVE EAX.exe

File Explorer

‎⁨تبيعه با فلوس nzf⁩.zip

.zip 621KB
تبيعه با فلوس nzf/CREATIVE EAX.exe

.exe 612KB
تبيعه با فلوس nzf/IMG_3726.png

.png 67KB

‎⁨تبيعه با فلوس nzf⁩.zip

SHA256 d9140bf5ee9495f06bc8a3c37ff3b893c0a40832424e0bd224a7d0b8645c2d75
MD5 b6ab37b4fee69419a0716928f490eed0
SHA1 da8d19fda2e086c9a85531e6174f588000a369b9
SHA512 724cc1f27215248a4ccf0fb362907d2fd9671b98c937d0ecd0a5faa817a2c7aeaf5c0205ba98cda86e3738a0a561bd883f5015cfc2d7b9009e6dd6f506c3880a
SSDEEP 12288:CbaQq6Tfwj5cMqXmnTZcYcvHNmejUsL0cI1znpNEqqarXk9/SL2dTw+bJ8:CbaQqsucMoOWfnm1L4vaQdxJ8
TLSH
T125D423125CA5F5C7C4BB9EF63DA88B144AAC9D5BBA69816B03AAF1834B0CF11760CD05
MD5 SHA1 SHA512 SSDEEP TLSH

تبيعه با فلوس nzf/CREATIVE EAX.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 7f7317053a1e6692efc9a27989a2a875944a388afdf245bb8d434cec91bc8c10
MD5 b353900241a21029ec2d2cb7a92144f1
SHA1 903f7a18917ab2cee209baa0043c78c2ec92a32e
SHA512 0e3675fafe1dee862957c2bfb534b640ffa6fcbb168d5fcc0f605f010461a1045e4d66f2f26d5c289c3f98192453fb0552735e255a9ede4a64f87b36c02acfc3
SSDEEP 12288:Pkkkkkkkk9c/o90KfC8moMuKQFde/Qe/s0KCBUXAikxIoBNtQ3qSanZr0KF:7qqFdOQOUw9Q34x
TLSH
T144D412D4AEBAC320CE7F1BB888A6AF1313FB351B54D1C15688D658CEA757F111C8264B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

573710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Users\nzf12\downloads\‏‏افضل نسخه - نسخة\obj\Debug\CREATIVE EAX.pdb

‎⁨تبيعه با فلوس nzf⁩.zip

تبيعه با فلوس nzf/CREATIVE EAX.exe

mscoree

dotnet

تبيعه با فلوس nzf/IMG_3726.png

Sharing

General

Malware Config

Signatures

File Explorer

‎⁨تبيعه با فلوس nzf⁩.zip

تبيعه با فلوس nzf/CREATIVE EAX.exe

mscoree

dotnet

تبيعه با فلوس nzf/IMG_3726.png