0dcd7b6666e05b0ab867b3b6bdd1f855[.]zip

General

Target
0dcd7b6666e05b0ab867b3b6bdd1f855.zip
Size 523KB
Sample260728-aramdaeb87
SHA256 e6c70f8084fd12b155bc1bd6e71c3edb5ff8f10dc167ac830d11c44a3f92a300
MD5 99c9750929898ecc6195a1baf12b23e0
SHA1 57fa5579f01386c5f27dab21c9c0362ecc193ba8
SHA512 29fc00a54b73860fcdffb982aaa2c5cf764b46c19b3eac6505092655e8b1a9d95f2b1d499f154de7a54ebff7303829584206d7e82ff4c5483544b9a03af0bdfe
SSDEEP 12288:eIki3M20u1JCJZulgrneRz8w8of/CHEa+Qmio6es5jLbtIn:yicAbCJZulOneqwJ/CHEEho6e+jU
TLSH
T1DCB42395C29890C3D3513802984F00D5BCD5F258B0A4649AF39E7698DB9EB9E376EFF0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FACTURA-7654345678760000023.exe

File Explorer

0dcd7b6666e05b0ab867b3b6bdd1f855.zip

.zip 523KB
FACTURA-7654345678760000023.exe

.exe 902KB

0dcd7b6666e05b0ab867b3b6bdd1f855.zip

SHA256 e6c70f8084fd12b155bc1bd6e71c3edb5ff8f10dc167ac830d11c44a3f92a300
MD5 99c9750929898ecc6195a1baf12b23e0
SHA1 57fa5579f01386c5f27dab21c9c0362ecc193ba8
SHA512 29fc00a54b73860fcdffb982aaa2c5cf764b46c19b3eac6505092655e8b1a9d95f2b1d499f154de7a54ebff7303829584206d7e82ff4c5483544b9a03af0bdfe
SSDEEP 12288:eIki3M20u1JCJZulgrneRz8w8of/CHEa+Qmio6es5jLbtIn:yicAbCJZulOneqwJ/CHEEho6e+jU
TLSH
T1DCB42395C29890C3D3513802984F00D5BCD5F258B0A4649AF39E7698DB9EB9E376EFF0
MD5 SHA1 SHA512 SSDEEP TLSH

FACTURA-7654345678760000023.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4452f24dca9c5b6e385c5b5937520b3c4a814aa0aba0a186e08d460c9caeda94
MD5 b1dc86726bd3a4e5ca557900399d56e7
SHA1 a914f54e213aa631984f034fef0aa426d9003cb1
SHA512 c54fe3f335c4abbf896888cfe16a7176c67d67d3fbcb7e8024531b8ffd98c2b80bf17a68fca70e93f06982eb46c297515487c504281420a597beea557b210716
SSDEEP 12288:LecHPzPwCumUjKkZIvilp+07uMortfB4takMtzql8kwRLv77SQzNMbu3z1i:Lem7P4KkZ/cSIkIRBJPi
TLSH
T12015BF52F7845796CCA963741039CA3003F6BD966935E55D2EE83D9B3FF2EA38222503
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

626686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

0dcd7b6666e05b0ab867b3b6bdd1f855.zip

FACTURA-7654345678760000023.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

0dcd7b6666e05b0ab867b3b6bdd1f855.zip

FACTURA-7654345678760000023.exe

mscoree

dotnet