25092026_1649_25092026_Sales Contract USD314-298[.]50[.]rar

General

Target
25092026_1649_25092026_Sales Contract USD314-298.50.rar
Size 617KB
Sample260925-vb3nfasx4p
SHA256 3f1b4becdf2e061f686b334b21f95c30d25a3a47a0f9aa2aaa8e0e30fdf34e47
MD5 da07487e1110527ed2e3e5ae7b6e48f2
SHA1 3949e1477da76fb8ddd80e90ad04e50a11c6613c
SHA512 4d2e498cac09c7a8a219c125f592a21b5d8b94626601ddcfe246262e378b73884cb718425290a89f9504a0f60fe52a5f76420e38f0401930f011f7726422cd37
SSDEEP 12288:GtLmwX9gT+/7Jwhj+b6qdQ5EVrzP+/C2cbtmGbsdMTeFyUvTNNYIxJv/:smwXxJwhjglThbttzCyMQIx5
TLSH
T169D4333C62F4EAF7CD89328767F4CAA919ACF419E421C5ADADE402B64817B07DE17805
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Sales Contract USD314,298.50.exe

File Explorer

25092026_1649_25092026_Sales Contract USD314-298.50.rar

.rar 617KB
Sales Contract USD314,298.50.exe

.exe 694KB

25092026_1649_25092026_Sales Contract USD314-298.50.rar

SHA256 3f1b4becdf2e061f686b334b21f95c30d25a3a47a0f9aa2aaa8e0e30fdf34e47
MD5 da07487e1110527ed2e3e5ae7b6e48f2
SHA1 3949e1477da76fb8ddd80e90ad04e50a11c6613c
SHA512 4d2e498cac09c7a8a219c125f592a21b5d8b94626601ddcfe246262e378b73884cb718425290a89f9504a0f60fe52a5f76420e38f0401930f011f7726422cd37
SSDEEP 12288:GtLmwX9gT+/7Jwhj+b6qdQ5EVrzP+/C2cbtmGbsdMTeFyUvTNNYIxJv/:smwXxJwhjglThbttzCyMQIx5
TLSH
T169D4333C62F4EAF7CD89328767F4CAA919ACF419E421C5ADADE402B64817B07DE17805
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Sales Contract USD314,298.50.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 fe15f3c14abda3b58799555e7700cdf92ca912c5eb1db9f7eae81f60513ad5ff
MD5 5b4635891f9f1544fd414b1632c862d0
SHA1 f182a8aec051a8f8a71fb396b8e4532799f287fd
SHA512 97c64108b713e727797427029152f51e5d5d393acf1ca63a6bd32b36417f89a0caff1c9cd5900874cdb957d5ce104b0f4f6778b951e435cec63d70905bac9988
SSDEEP 12288:f8XTDN6jbE7YVJHlpfZXZPNF+yk1Dz9P8r8M1WeL4mBJDHbA:EXNZYLjJtNFM1BMUzUJD7A
TLSH
T136E4F154721AC40BCA6413F85AB1E23117B95EE9B522D3D68FD97DEFB9B2F014C402A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

710114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

25092026_1649_25092026_Sales Contract USD314-298.50.rar

Sales Contract USD314,298.50.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

25092026_1649_25092026_Sales Contract USD314-298.50.rar

Sales Contract USD314,298.50.exe

mscoree

dotnet