Purchase Order B302607-842[.]lzh

General

Target
Purchase Order B302607-842.lzh
Size 845KB
Sample260803-phay4shd43
SHA256 9a4392920919016249ca354a9ca88d98643fc94b305d99be5319e38aba0ac384
MD5 000294af2cea5e87b45fad69f348662e
SHA1 9f33cdd5f0dabdd4352e6547fa36128c816d562b
SHA512 0c423a4edcddc5c2debf8b0b056e00219adcfde3a6cdd9386dddf12ff3fa03d9ad2a04d76464860101cb1d8044be729ce7d7105325a2eff3cbc3434f78439ae2
SSDEEP 24576:HJr1tH2DVmq8hLDAbHXt18MPyi9AMbQu1Op:HJZ7zLsb34MrOd
TLSH
T144053346BE80C463C15D69BFB0B2B45D35DA03BC9AB77318CE862F299643542DA4CE4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order B302607-842.exe

File Explorer

Purchase Order B302607-842.lzh

.lzh 845KB
Purchase Order B302607-842.exe

.exe 991KB

Purchase Order B302607-842.lzh

SHA256 9a4392920919016249ca354a9ca88d98643fc94b305d99be5319e38aba0ac384
MD5 000294af2cea5e87b45fad69f348662e
SHA1 9f33cdd5f0dabdd4352e6547fa36128c816d562b
SHA512 0c423a4edcddc5c2debf8b0b056e00219adcfde3a6cdd9386dddf12ff3fa03d9ad2a04d76464860101cb1d8044be729ce7d7105325a2eff3cbc3434f78439ae2
SSDEEP 24576:HJr1tH2DVmq8hLDAbHXt18MPyi9AMbQu1Op:HJZ7zLsb34MrOd
TLSH
T144053346BE80C463C15D69BFB0B2B45D35DA03BC9AB77318CE862F299643542DA4CE4F
MD5 SHA1 SHA512 SSDEEP TLSH

Purchase Order B302607-842.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c1044fc6c772b3f0253347d5b62e203bcdc1eaf9efa4bec5932c4d32ca239562
MD5 5669e50020e9b2b53c3d8a38066bafb9
SHA1 68d936b30a7618d8e1624236b76d705400809d01
SHA512 1c028e3fabb96e301245965b762320ea7f339418e662c6884b213fbcf59b4de857b31af3dc2d0a12d9bc5e2a6dd4eb866e439eab0d29a0bf5b4bdeef7abf76da
SSDEEP 24576:EJCe2R2N7CwghnZrk9P01WaeocHQiXUivpwfiZ:E0hR2N7CwmAMQaeVwSUiRwq
TLSH
T17225BFAC3610F99FC457C97689A4ED74A6206CBA9307D20391E71DEFB90CA97DF041E2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1020670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Purchase Order B302607-842.lzh

Purchase Order B302607-842.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Purchase Order B302607-842.lzh

Purchase Order B302607-842.exe

mscoree

dotnet