20102026_1308_20102026_Specification_Order_details-Oct-19th_Pdf[.]zip

General

Target
20102026_1308_20102026_Specification_Order_details-Oct-19th_Pdf.zip
Size 503KB
Sample261020-qdc4cabf92
SHA256 ad6d35ff371547d7f87a6e54244f7d39843ba4924c3370c2b7945efc9cd79501
MD5 dd8b003e5d12f4051608b9f927fe1ad2
SHA1 cf658813c8f68a4368b63ef1f2867580580a704f
SHA512 c17bdea1b1172c82a896335e008e4344c92e939bfa65ed7a416a1f4b83acd13a34653e5aacb74827850159493c441fc8131308ad1043f101a98ffddcdb4983c8
SSDEEP 12288:+ISxvox/AjaZ22yyM5s5X2HFWwJ2cbB0kDKHqR2awSrx:///AjopnuvHUYBtDSjFm
TLSH
T112B42315778FC103BC89A0A2585B631C62883BECDE6175B0B7C0A735D8FE5DE8B1625E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Specification_Order_details-Oct-19th_Pdf.bat

File Explorer

20102026_1308_20102026_Specification_Order_details-Oct-19th_Pdf.zip

.zip 503KB
Specification_Order_details-Oct-19th_Pdf.bat

.exe 610KB

20102026_1308_20102026_Specification_Order_details-Oct-19th_Pdf.zip

SHA256 ad6d35ff371547d7f87a6e54244f7d39843ba4924c3370c2b7945efc9cd79501
MD5 dd8b003e5d12f4051608b9f927fe1ad2
SHA1 cf658813c8f68a4368b63ef1f2867580580a704f
SHA512 c17bdea1b1172c82a896335e008e4344c92e939bfa65ed7a416a1f4b83acd13a34653e5aacb74827850159493c441fc8131308ad1043f101a98ffddcdb4983c8
SSDEEP 12288:+ISxvox/AjaZ22yyM5s5X2HFWwJ2cbB0kDKHqR2awSrx:///AjopnuvHUYBtDSjFm
TLSH
T112B42315778FC103BC89A0A2585B631C62883BECDE6175B0B7C0A735D8FE5DE8B1625E
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Specification_Order_details-Oct-19th_Pdf.bat

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 17fb280cc5ad5829eed30b6ef0438b08b42768bf1a44330bf75bc307c2fb1073
MD5 316a598b0d0f500bc69b39d3656b18ee
SHA1 ec4e9d91c8b664d2224da41f33f43c19f5d4c0ed
SHA512 dc1006f92805f90a01899105a898cecdfa7dedc0ed32a27c5286fbc2f4a7260841af3bc0dfb14b2159da4a08242e9e801cd88bc958d2826f21c7768479203dfd
SSDEEP 12288:CR4+5uaVNhwFv/4P+VcThtgSMBGjo0bvdVZvaYvw+Zs:OVYFIPkc3U0bvHMYI
TLSH
T180D4CE102265E711D5F277B5C9B1F2F453B8AEC9F821D20B4EE67DDBF831B005A0A692
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

629466

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

20102026_1308_20102026_Specification_Order_details-Oct-19th_Pdf.zip

Specification_Order_details-Oct-19th_Pdf.bat

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

20102026_1308_20102026_Specification_Order_details-Oct-19th_Pdf.zip

Specification_Order_details-Oct-19th_Pdf.bat

mscoree

dotnet