General

  • Target
    pmenexe.zip
  • Size 47.6MB
  • Sample261006-zyvcssvx3k
  • SHA256 583e7dd241aca303f68af3b90251741edd7ec918f1e8033bb97f8389f8b75375
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 38 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • pmenexe.zip
    .zip 47.6MB
  • APACHE_LICENSE.TXT
    2KB
  • Appeon.PowerBuilder.DataWindow.Excel12.deps.json
    508B
  • Appeon.PowerBuilder.DataWindow.Excel12.dll
    .dll 46KB
  • Appeon.PowerBuilder.NETInterop.deps.json
    1007B
  • Appeon.PowerBuilder.NETInterop.dll
    .dll 50KB
  • Appeon.PowerBuilder.NETInterop.runtimeconfig.json
    269B
  • AtlAuxiliary.dll
    .dll 27KB
  • EA_strateegia_vorm1.xls
    .xls 192KB
  • Ijwhost.dll
    .dll 134KB
  • Koguste_impordi_fail.xlsx
    .xlsx 7KB
  • Kuuaruanne_2011_vorm1.xls
    .xls 82KB
  • Kuuaruanne_2012_vorm1.xls
    .xls 58KB
  • Kuuaruanne_vorm1.xls
    .xls 82KB
  • PBDOM.pbx
    .dll 1.6MB
  • PBDWExcel12Interop.deps.json
    412B
  • PBDWExcel12Interop.runtimeconfig.json
    399B
  • Stat_PalkKuu.csv
    7KB
  • Stat_PalkKuu2023.csv
    3KB
  • System.IO.Packaging.dll
    .dll 314KB
  • allikad.txt
    144B
  • base.pbd
    2.0MB
  • concrt140.dll
    .dll 314KB
  • curl/curl-ca-bundle.crt
    216KB
  • curl/curl.exe
    .exe 5.9MB
  • curl/libcurl-x64.def
    2KB
  • curl/libcurl-x64.dll
    .dll 5.7MB
  • dk.pbd
    5.0MB
  • ea.pbd
    969KB
  • font/NotoSans-Bold.ttf
    389KB
  • font/NotoSans-Regular.ttf
    389KB
  • klassif.pbd
    1.2MB
  • kontod2004.txt
    63KB
  • kontod2004_kokku.txt
    11KB
  • kontod2025.txt
    79KB
  • kontojuhised.txt
    129KB
  • kontojuhised.xlsx
    .xlsx 140KB
  • kontoplaan.txt
    51KB
  • kp.pbd
    2.8MB
  • kp_kuuaru2013fix.txt
    162KB
  • kp_kuuaru2014fix.txt
    169KB
  • kululiigid.txt
    17KB
  • kuuaru2004.txt
    13KB
  • kuuaru2005.txt
    14KB
  • kuuaru2012.txt
    5KB
  • lang/English.lng
    391KB
  • libcurl.dll
    .dll 5.9MB
  • ls.pbd
    1.5MB
  • main.pbd
    2.0MB
  • mall-eak-AccountPlanRequest.xml
    .xml 431B
  • mall-eak-BuyInvoicePdfRequest.xml
    .xml 390B
  • mall-eak-BuyInvoiceRegisteredRequest.xml
    .xml 387B
  • mall-eak-BuyInvoiceRequest.xml
    .xml 416B
  • mall-eak-ClientRegistryRequest.xml
    .xml 416B
  • mall-eak-CostReportExportRequest.xml
    .xml 412B
  • mall-eak-DimensionRegistryRequest.xml
    .xml 443B
  • mall-eak-EInvoiceRequest.xml
    .xml 372B
  • mall-eak-SaleInvoiceExportRequest.xml
    .xml 440B
  • mall-ehis-confirmation.xml
    745B
  • mall-ehis-invoicerequest.xml
    634B
  • mall-emr-AccountPlanRequest.xml
    .xml 166B
  • mall-emr-ClientRegistryRequest.xml
    .xml 172B
  • mall-emr-CustomFieldsRequest.xml
    .xml 168B
  • mall-emr-DimensionRegistryRequest.xml
    .xml 178B
  • mall-emr-VatCodeRegistryRequest.xml
    .xml 174B
  • mall-oc-sendSaleInvoice.xml
    .xml 703B
  • mfc140u.dll
    .dll 5.4MB
  • msvcp140.dll
    .dll 540KB
  • mt.pbd
    1.5MB
  • nethost.dll
    .dll 102KB
  • pa.pbd
    4.0MB
  • paring.pbd
    897KB
  • pb.ini
    25B
  • pbAccessibility.dll
    .dll 53KB
  • pbDWExcel12Interop.dll
    .dll 87KB
  • pbPDF.dll
    .dll 749KB
  • pbUIS.dll
    .dll 3.8MB
  • pbXerces.dll
    .dll 1.3MB
  • pbacc.dll
    .dll 31KB
  • pbcompression.dll
    .dll 1.9MB
  • pbcrypt.dll
    .dll 1.1MB
  • pbdotnet.dll
    .dll 186KB
  • pbdotnetcoreinvoker.dll
    .dll 115KB
  • pbdotnetframeworkinvoker.dll
    .dll 665KB
  • pbdotnetinvoker.dll
    .dll 681KB
  • pbdotnetinvoker.runtimeconfig.json
    269B
  • pbdpl.dll
    .dll 435KB
  • pbdwe.dll
    .dll 8.1MB
  • pbhttpclient.dll
    .dll 2.1MB
  • pbjson.dll
    .dll 240KB
  • pboauth.dll
    .dll 145KB
  • pbodb.dll
    .dll 647KB
  • pbodb.ini
    79KB
  • pbpdfbuilder.dll
    .dll 1.1MB
  • pbresource.dll
    .dll 4.4MB
  • pbrestclient.dll
    .dll 1013KB
  • pbribbonbar.dll
    .dll 2.2MB
  • pbrth.dll
    .dll 36KB
  • pbshr.dll
    .dll 8.5MB
  • pbsmtpclient.dll
    .dll 1.1MB
  • pbsvg.dll
    .dll 6.7MB
  • pbsysfunc.dll
    .dll 45KB
  • pbtabbedbar.dll
    .dll 271KB
  • pbtheme.dll
    .dll 1.3MB
  • pbtra.dll
    .dll 106KB
  • pbtrs.dll
    .dll 55KB
  • pbvm.dll
    .dll 12.3MB
  • pdflib.dll
    .dll 8.6MB
  • pikkbilanss.txt
    22KB
  • pl.pbd
    676KB
  • pmen.exe
    .exe 701KB
  • pmen.xml
    .xml 169B
  • pmen_ribbonbar.xml
    .xml 142KB
  • pmen_ribbondubleeri.xml
    .xml 3KB
  • pmen_ribbonemta.xml
    .xml 2KB
  • pmen_ribbonlaek.xml
    .xml 3KB
  • pmen_ribbonmail.xml
    .xml 5KB
  • pmen_ribbontool.xml
    .xml 3KB
  • pr.pbd
    1.7MB
  • pr_bil.txt
    1KB
  • pr_tulem.txt
    1KB
  • putty/pscp.exe
    .exe 542KB
  • putty/psftp.exe
    .exe 554KB
  • pv.pbd
    1.3MB
  • rahavoog.txt
    1KB
  • redko.pbd
    2.2MB
  • saldoandmik_1.0.dtd
    .xml 550B
  • tegevusalad.txt
    6KB
  • tehingupartnerid.txt
    224KB
  • tululiigid.txt
    13KB
  • vastlist_aadr.txt
    3KB
  • vcruntime140.dll
    .dll 120KB
  • vcruntime140_1.dll
    .dll 46KB
  • xerces-c.dll
    .dll 2.7MB

pmenexe.zip

  • SHA256 583e7dd241aca303f68af3b90251741edd7ec918f1e8033bb97f8389f8b75375
  • MD5 SHA1 SHA512 SSDEEP TLSH