05092026_0548_03092026_Doc 001886_1308002341 Pdf[.]zip

General

Target
05092026_0548_03092026_Doc 001886_1308002341 Pdf.zip
Size 973KB
Sample260905-ghgsnaxeqa
SHA256 806dccaf331f87361a999d8270d22873bb083865efc7e1d5d538f25270b4c9a5
MD5 2c733f32e39a1c9871dffbc12e207981
SHA1 ad8a9f2b575981295fab846aae5d56914d071907
SHA512 dc0425240ad5cf4e99d06b627f7b3820af12b09259102784a8156e690fcd97f4e39113861cdac8277f898c50d9b4e15aaffa7593354e21c85658f19f30a93b06
SSDEEP 24576:b6jR2zN+Dgf7G3VhP1RNBJ7jh5dJFyzWV/fnQTDP:bWR2kY74vzHRF5nF/V/iDP
TLSH
T1562533F21E21B1FFDD948B983DAB336AD8B859562DA639C33C8850ECAC62472D5401F5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Doc001886_1308002341 Pdf.exe

File Explorer

05092026_0548_03092026_Doc 001886_1308002341 Pdf.zip

.zip 973KB
Doc001886_1308002341 Pdf.exe

.exe 1.1MB

05092026_0548_03092026_Doc 001886_1308002341 Pdf.zip

SHA256 806dccaf331f87361a999d8270d22873bb083865efc7e1d5d538f25270b4c9a5
MD5 2c733f32e39a1c9871dffbc12e207981
SHA1 ad8a9f2b575981295fab846aae5d56914d071907
SHA512 dc0425240ad5cf4e99d06b627f7b3820af12b09259102784a8156e690fcd97f4e39113861cdac8277f898c50d9b4e15aaffa7593354e21c85658f19f30a93b06
SSDEEP 24576:b6jR2zN+Dgf7G3VhP1RNBJ7jh5dJFyzWV/fnQTDP:bWR2kY74vzHRF5nF/V/iDP
TLSH
T1562533F21E21B1FFDD948B983DAB336AD8B859562DA639C33C8850ECAC62472D5401F5
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Doc001886_1308002341 Pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 21be8dfedf732b6e39b3d03eabffaaccfa41bbce665fc8c71524c4c0b406a44e
MD5 505ce105d3d9bf04484f04134ecd7132
SHA1 1aca56a5891c726a154d382fe5a03cca1b169669
SHA512 03047f87e7ebd9992d9f890682094f2e7e781c781fc8cf923c9d2c23482ec999bf196bb746393ff0856f3c1e30705f607f3a0786f6283a58d523d14993ba5713
SSDEEP 24576:womilj7O5SC7mnCRtbaKgRQ1NpB37FX5NJxyrexUCU:wyp7OlmnCRtbaVQDrLF53xFt
TLSH
T15F35E03915678502E8F26EF05DB1A1F0A7666C66B239E0291FC20DAFF6772117E4133B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1111394

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

05092026_0548_03092026_Doc 001886_1308002341 Pdf.zip

Doc001886_1308002341 Pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

05092026_0548_03092026_Doc 001886_1308002341 Pdf.zip

Doc001886_1308002341 Pdf.exe

mscoree

dotnet