invoice and packing list[.]exe

General

Target
invoice and packing list.exe
Size 1.2MB
Sample260901-g2v5dstdke
SHA256 d2a4ad1db761a3776160317ba0325d100e65d2baea62d52effee899ab5d355a8
MD5 6b058559a54275746bfc645d5c5214d0
SHA1 46cb66556e0b2b44df79d815fc27cd65859d759d
SHA512 ae99d8274dc0479b3d94f8a5ebb58ad0b30cb56f005269d3ad52b61e4dbbe6173d01b53a13119f191176df01e60e821dcadde5240242aea6a80e4af5dd338ac2
SSDEEP 24576:4cUAtPa6ObJ+SAmkqkX7YhQzi5IO7WL4iAJR:HXPalESAmyWQzmHWL
TLSH
T10E45F02112D99F59F5BF97348875501887F3BC46DF31D7EE3E8C18EA3A22A818661723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
invoice and packing list.exe

File Explorer

invoice and packing list.exe

.exe 1.2MB

invoice and packing list.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d2a4ad1db761a3776160317ba0325d100e65d2baea62d52effee899ab5d355a8
MD5 6b058559a54275746bfc645d5c5214d0
SHA1 46cb66556e0b2b44df79d815fc27cd65859d759d
SHA512 ae99d8274dc0479b3d94f8a5ebb58ad0b30cb56f005269d3ad52b61e4dbbe6173d01b53a13119f191176df01e60e821dcadde5240242aea6a80e4af5dd338ac2
SSDEEP 24576:4cUAtPa6ObJ+SAmkqkX7YhQzi5IO7WL4iAJR:HXPalESAmyWQzmHWL
TLSH
T10E45F02112D99F59F5BF97348875501887F3BC46DF31D7EE3E8C18EA3A22A818661723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1238286

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

invoice and packing list.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

invoice and packing list.exe

mscoree

dotnet