02112026_0904_01112026_PO- 20260211[.]pdf[.]gz

General

Target
02112026_0904_01112026_PO- 20260211.pdf.gz
Size 1.2MB
Sample261102-k1psrsssdx
SHA256 07285883652e98c5b506591a6b544e8e6911ca1310689be80449e69950ac5c7d
MD5 a8640e2662b7963dfff2366328d1018c
SHA1 4b847c27f6aec61f2339b1c329b9b3ba4b4429bb
SHA512 ca829737a5b37e436f842c27f9a2a8961032833d0576642c30969d129398308a862fcc21ada33db0923d291e1f3ded6572d7cda9e3d7fd60ae71d8b680ea6de5
SSDEEP 24576:82bWDsTPECbBcixDRss/9S28jh8FUmiD60QTf9E3PD002lu+yBAiy7sCj:8lsLMU9S28eFUmiD60t70G+y/i
TLSH
T1225533D36B809877F246974B63805DDC9AA22FCBA11E398C5266BC871191B7F61FCD01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO- 20260211.pdf.exe

File Explorer

02112026_0904_01112026_PO- 20260211.pdf.gz

.gz 1.2MB
PO- 20260211.pdf.exe

.exe 1.4MB

02112026_0904_01112026_PO- 20260211.pdf.gz

SHA256 07285883652e98c5b506591a6b544e8e6911ca1310689be80449e69950ac5c7d
MD5 a8640e2662b7963dfff2366328d1018c
SHA1 4b847c27f6aec61f2339b1c329b9b3ba4b4429bb
SHA512 ca829737a5b37e436f842c27f9a2a8961032833d0576642c30969d129398308a862fcc21ada33db0923d291e1f3ded6572d7cda9e3d7fd60ae71d8b680ea6de5
SSDEEP 24576:82bWDsTPECbBcixDRss/9S28jh8FUmiD60QTf9E3PD002lu+yBAiy7sCj:8lsLMU9S28eFUmiD60t70G+y/i
TLSH
T1225533D36B809877F246974B63805DDC9AA22FCBA11E398C5266BC871191B7F61FCD01
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

PO- 20260211.pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 340090f81bcc5803812f59288a47af37a55582185ab6e1059c4a299704a1dcf6
MD5 4a2badc1b073fc13443fe2ffe6c92eae
SHA1 61db9ab5451af964404950bb5805ea73ff2f787b
SHA512 9f35e95670ed5f049eeb28f82e223f190ce5756f10067c06d30dd1d88aa51aa38c2c035a439c34949f6454271c4e6684ef034485f9eb808fdf830c12e1934d6e
SSDEEP 24576:chqSF9RQuPhgixNR0kzFSW8hjuFkmi5q0Qb/PEBPpSE+Rg+aDGcapPA5BKp+4o:chLtyCFSW8QFkmi5q07RSi+aMA56o
TLSH
T1B165014833ADEF12D5799BF01AB0D67903B92E59A231E34A0EE6BDDB3422F506C54743
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1422954

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

02112026_0904_01112026_PO- 20260211.pdf.gz

PO- 20260211.pdf.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

02112026_0904_01112026_PO- 20260211.pdf.gz

PO- 20260211.pdf.exe

mscoree

dotnet