P4-Programming-Software[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
P4-Programming-Software.zip
Size 760KB
Sample261101-1pfcysdd37
SHA256 29d4f44a918e216c2fe18b0b5318658cf9fe5320c3e1a692a24b04add22c0d99
MD5 9028c70ecec71af372dca64427056554
SHA1 cbeb9e76de9642751ccf57483b7680b254ab1246
SHA512 8729f7375109233cbc627a7d4d02e01905c37668574498ddd44ff0608ab926bf50b1d62d903bc1ea8019e21c1b1f121aa49bf547d8a88f04201d07b292e1754b
SSDEEP 12288:Z7boRQNgHu1QeR6OSHjnPMvmBxOH4NP1YWj+ka5o0u1Lza+Eu+hTCqMF+Tr6H0Qa:ZoRQNpbRuDPUmGuP1Yfdo0WGxCNFK64z
TLSH
T159F433E4A66FA1A198D9E77C92B86FCB749CC436CCA539449853C0241D7DB90C3FED28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup P4 V1.5 20260421.exe

File Explorer

P4-Programming-Software.zip

.zip 760KB
Setup P4 V1.5 20260421.exe

.exe 784KB

P4-Programming-Software.zip

SHA256 29d4f44a918e216c2fe18b0b5318658cf9fe5320c3e1a692a24b04add22c0d99
MD5 9028c70ecec71af372dca64427056554
SHA1 cbeb9e76de9642751ccf57483b7680b254ab1246
SHA512 8729f7375109233cbc627a7d4d02e01905c37668574498ddd44ff0608ab926bf50b1d62d903bc1ea8019e21c1b1f121aa49bf547d8a88f04201d07b292e1754b
SSDEEP 12288:Z7boRQNgHu1QeR6OSHjnPMvmBxOH4NP1YWj+ka5o0u1Lza+Eu+hTCqMF+Tr6H0Qa:ZoRQNpbRuDPUmGuP1Yfdo0WGxCNFK64z
TLSH
T159F433E4A66FA1A198D9E77C92B86FCB749CC436CCA539449853C0241D7DB90C3FED28
MD5 SHA1 SHA512 SSDEEP TLSH

Setup P4 V1.5 20260421.exe

SHA256 76b91785219a0b9c2e7367161b3df73a230b014c3b5d051d6387acb38bec69ad
MD5 e5e99a5e916c9802639b2674e01bf2a5
SHA1 811d0d27105eaa3c7bc5a0c38dcb915945b5c2b9
SHA512 f436f24508f40ac8d33977c3c86b539ba6edf947e3b9aa2a2723d5a599956b323e59f5d68fe25ee913b63d74826e807779074f1757d8e6bc76d1066feec9e6d1
SSDEEP 24576:vi4b2vONbHR4/POm0Sd1Y/Ro0Gux2NFc60HxA:vi7ONbG/POm0SyF9L60H+
TLSH
T1C8052362F25B8075C0E1DAB89968DA89A52FFA364C34344874DEC89C1F3F7D0C25E759
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

43128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1024B

Virtual Size

592B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

P4-Programming-Software.zip

Setup P4 V1.5 20260421.exe

generic