CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300)[.]zip

General

Target
CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300).zip
Size 699KB
Sample261020-rf77yaex2n
SHA256 cd9a6c57064346bb1147fca4c4729827caf4843fec55d5a2a726295c6543adf3
MD5 7a95dd34570f99febc7aa779a5d3c525
SHA1 34f74048122879eabf0d8129a79a2c7d334c1e29
SHA512 271e3bf8a20b399cc1de34a43cec63e366967ebb70216272c64d7e7631e1ee14c9f297a148b0d1371556fc0cc91e7ad8f2356ada3cbd3e3600c6fb0b3ec6d550
SSDEEP 12288:hQFVduBvCZ0JACig25cuUR9sUXNvDYajqzSW2D5RJcFPlgW1DIkZ:hTvdcctDsGbYyqP2D5RJKWlkZ
TLSH
T1BEE43329C647985ADAC1862FB9AC0DAFD923D101C4E77CA464B47C1A11266FDCB438BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300).exe

File Explorer

CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300).zip

.zip 699KB
CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300).exe

.exe 805KB

CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300).zip

SHA256 cd9a6c57064346bb1147fca4c4729827caf4843fec55d5a2a726295c6543adf3
MD5 7a95dd34570f99febc7aa779a5d3c525
SHA1 34f74048122879eabf0d8129a79a2c7d334c1e29
SHA512 271e3bf8a20b399cc1de34a43cec63e366967ebb70216272c64d7e7631e1ee14c9f297a148b0d1371556fc0cc91e7ad8f2356ada3cbd3e3600c6fb0b3ec6d550
SSDEEP 12288:hQFVduBvCZ0JACig25cuUR9sUXNvDYajqzSW2D5RJcFPlgW1DIkZ:hTvdcctDsGbYyqP2D5RJKWlkZ
TLSH
T1BEE43329C647985ADAC1862FB9AC0DAFD923D101C4E77CA464B47C1A11266FDCB438BF
MD5 SHA1 SHA512 SSDEEP TLSH

CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300).exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 928c12ed72ab7f63a494b3ec7f0c4b5fb54a2aa2f9709f945f5e411767f2d582
MD5 cf412d58747c582b70578e088ebcddea
SHA1 7f9c790c44bfab9f2f38649f0d57d2d0d39cf5fd
SHA512 9047ebba832ed6298fc9e864c60d5c9e997ed4210b2d5ceb9835c4cfd2a821cd3c777b389ce0bc5f1765881d375724dc70df3a20e2a929dbf81bcd631849cf18
SSDEEP 12288:oRcF5uai+Z0nEDGE8R7NApE56ubpaIyAbAOUOwiKmJqV4mf2lLNS:JiiW6+IRAgOFJqlf2pw
TLSH
T15005EF202258EB02D9E677B8C561F2F547A9AEC9F422E2074EE17DDFF835B005E0B552
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

829946

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300).zip

CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300).exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300).zip

CDS Entry Document - 6GB235976624000-SEAE26J509548 WOTHMPHMP0000000221678 B1 (EXD - 2300).exe

mscoree

dotnet