29102026_0215_28102026_Packing_List[.]pdf[.]pdf[.]z

General

Target
29102026_0215_28102026_Packing_List.pdf.pdf.z
Size 666KB
Sample261029-cpxegaws9m
SHA256 02ee4367421376af88fd783f854bd943c05a4e9fdc9a8f01e00ebebd38f4ead2
MD5 9fc799338d80d943ab679f812e705d05
SHA1 e31ba2ac02a053e9605a4eb9d85582707dbb7016
SHA512 4744ff252b13f0d4665476ab7c4f5d02ce64d6b4d92bec3a682027aaee53907c70496e58bfbe8802d0b5bfc84c7868565fafbbe0954769a2eb70e2265362f491
SSDEEP 12288:QMLNYExNrZGCywXGPsIRuxJG41vhjkrbL4IkIvkO1iIR1lHbdeW9pal:cEjkwWKNZQ/mjUi0lHbdegu
TLSH
T18AE423FBE22C557EE717FAB57D05347B49C9F628D0964091D802CCE60BB4EAA14487F8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Packing_List.pdf.exe

File Explorer

29102026_0215_28102026_Packing_List.pdf.pdf.z

.rar 666KB
Packing_List.pdf.exe

.exe 806KB

29102026_0215_28102026_Packing_List.pdf.pdf.z

SHA256 02ee4367421376af88fd783f854bd943c05a4e9fdc9a8f01e00ebebd38f4ead2
MD5 9fc799338d80d943ab679f812e705d05
SHA1 e31ba2ac02a053e9605a4eb9d85582707dbb7016
SHA512 4744ff252b13f0d4665476ab7c4f5d02ce64d6b4d92bec3a682027aaee53907c70496e58bfbe8802d0b5bfc84c7868565fafbbe0954769a2eb70e2265362f491
SSDEEP 12288:QMLNYExNrZGCywXGPsIRuxJG41vhjkrbL4IkIvkO1iIR1lHbdeW9pal:cEjkwWKNZQ/mjUi0lHbdegu
TLSH
T18AE423FBE22C557EE717FAB57D05347B49C9F628D0964091D802CCE60BB4EAA14487F8
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Packing_List.pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 55ddb44c2270d8c81d628bd30805c0fe9ff3bd68fcda5d1e8eb7cb546ba4cb59
MD5 d3890be0e2dfaa273c670cdfad0ec112
SHA1 9a2f49844a82f519837a89b50df94985e7a9fd64
SHA512 b831104c23e09595f176788419c1a172e3b485219a8b45ef1657612c1f3ae50a8357cb6c3ae8a812d560eb9d2f7c08c59d30025693af34897ba434db0dbb7b2d
SSDEEP 24576:Yo1b9999uMX+c03/9F7YVDUsUvaNBsUXakT3Qx0gGa4OZ:hMxca9dEUSNBsUXrQx07a4
TLSH
T1B905F11421274905D4B66FF44C71E2B06B7AAC56A235C316CFD60CEB7E2B780BE4A327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

826726

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Administrator\Desktop\Client\Temp\pEmJemawKf\src\obj\Debug\xVWj.pdb

29102026_0215_28102026_Packing_List.pdf.pdf.z

Packing_List.pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

29102026_0215_28102026_Packing_List.pdf.pdf.z

Packing_List.pdf.exe

mscoree

dotnet