85e9c59558d5595444a6f0040b66b5962b968aea0266b1f52156a7be91469b73

General

Target
85e9c59558d5595444a6f0040b66b5962b968aea0266b1f52156a7be91469b73
Size 623KB
Sample261002-e8p6lsvfjf
SHA256 85e9c59558d5595444a6f0040b66b5962b968aea0266b1f52156a7be91469b73
MD5 ac8b7b20e4e891b06515fda1eff19975
SHA1 7fbd0d9974f06cd62c905735731714c2244773cb
SHA512 7d71005f01b3138b840cecbc350188071e9843cfce8fe64f2207c6cf15c83911cf6e83c33c2bf43cfde6b29fa28181ce0993e5591b657054ac0bc7cee94e9926
SSDEEP 12288:a0dqWkZqpDlRui4bhDZLDqGGTdezAYdS7nYOM8Oq5af1qXTNdb7R2VLeZeheuajQ:a0HkZqpRRx4dDdOnBezeM1fMDNx7Ahr9
TLSH
T195D433875FBB106F8BC906AD3DC59A92E0E066780CF61C6BF538E06FD49181FE45162A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Purchase_List.cmd

File Explorer

85e9c59558d5595444a6f0040b66b5962b968aea0266b1f52156a7be91469b73

.zip 623KB
Purchase_List.zip

.zip 623KB
Purchase_List.cmd

.exe 851KB

85e9c59558d5595444a6f0040b66b5962b968aea0266b1f52156a7be91469b73

SHA256 85e9c59558d5595444a6f0040b66b5962b968aea0266b1f52156a7be91469b73
MD5 ac8b7b20e4e891b06515fda1eff19975
SHA1 7fbd0d9974f06cd62c905735731714c2244773cb
SHA512 7d71005f01b3138b840cecbc350188071e9843cfce8fe64f2207c6cf15c83911cf6e83c33c2bf43cfde6b29fa28181ce0993e5591b657054ac0bc7cee94e9926
SSDEEP 12288:a0dqWkZqpDlRui4bhDZLDqGGTdezAYdS7nYOM8Oq5af1qXTNdb7R2VLeZeheuajQ:a0HkZqpRRx4dDdOnBezeM1fMDNx7Ahr9
TLSH
T195D433875FBB106F8BC906AD3DC59A92E0E066780CF61C6BF538E06FD49181FE45162A
MD5 SHA1 SHA512 SSDEEP TLSH

Purchase_List.cmd

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b0a5ff4e6a3f4e9f3fea619f045da7683e42cf5b7317583d2f1ce2d0161e0e03
MD5 2f1397c2c82023049d4db07ad252ea4c
SHA1 5d56ead4134f209d4fc00701715b1031bc9d4e1d
SHA512 c9afd5adfa86b2dafcd97d57f44146a3955e4a9ac652e4997ec6b3437cecc2c772ba245ff98e7c1b3cff09ee52587788cffdb190c3ad33a0e5b4c75f2f55af5c
SSDEEP 12288:gAHc/X5x6yGSjqt3TdA1EgoOi84q52f/qXd8UY7LQH2Cs3WngOC0RwqK:gAH0fohA12LfyN8T7L
TLSH
T1FE059DAC3A50F89EC4578935CAA4EDF0A5602C6AC707D20354D73E9FBD3E6978E045E2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

808862

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

85e9c59558d5595444a6f0040b66b5962b968aea0266b1f52156a7be91469b73

Purchase_List.zip

Purchase_List.cmd

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

85e9c59558d5595444a6f0040b66b5962b968aea0266b1f52156a7be91469b73

Purchase_List.zip

Purchase_List.cmd

mscoree

dotnet