02112026_1439_02112026_Payment Advice_7435219[.]bat[.]rar

General

Target
02112026_1439_02112026_Payment Advice_7435219.bat.rar
Size 740KB
Sample261102-r1pakaax71
SHA256 dab440883f3ab6355e11525ffeb91f0d57ce3f082a7853956f73b8b236995590
MD5 59cbfbf19337f7df8dadc0d2728e67d7
SHA1 57b66f267dc1b85e2a5b66ecff39a9a68b9ba8e1
SHA512 dc817b4f082ef6b133bec8e41045b74c6c689ae49494037626f3471c8978d357ec7b707b2ef60c749907fb7a94ccb9ffa2aec8dede6b4f792d6f758eea891918
SSDEEP 12288:+hYeuQmk/Nz2aXtXV07Vxx5EDtY1IBF0CKU/jt4Z6GY3fzzQ6IfjDso:+uR/k/Nz22tl4xx5mCgNrqZ6Lchjwo
TLSH
T1B0F433E56CA180F0A29BA93FCFDF12068AC89D8867DF5BD0EB94552676CFC319472134
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment Advice_7435219.bat

File Explorer

02112026_1439_02112026_Payment Advice_7435219.bat.rar

.rar 740KB
Payment Advice_7435219.bat

.exe 851KB

02112026_1439_02112026_Payment Advice_7435219.bat.rar

SHA256 dab440883f3ab6355e11525ffeb91f0d57ce3f082a7853956f73b8b236995590
MD5 59cbfbf19337f7df8dadc0d2728e67d7
SHA1 57b66f267dc1b85e2a5b66ecff39a9a68b9ba8e1
SHA512 dc817b4f082ef6b133bec8e41045b74c6c689ae49494037626f3471c8978d357ec7b707b2ef60c749907fb7a94ccb9ffa2aec8dede6b4f792d6f758eea891918
SSDEEP 12288:+hYeuQmk/Nz2aXtXV07Vxx5EDtY1IBF0CKU/jt4Z6GY3fzzQ6IfjDso:+uR/k/Nz22tl4xx5mCgNrqZ6Lchjwo
TLSH
T1B0F433E56CA180F0A29BA93FCFDF12068AC89D8867DF5BD0EB94552676CFC319472134
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Payment Advice_7435219.bat

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1f1007ec859f46e109c8a1a0aa8ecac0718cf12dde897d3b2e8ec30fe2036ef2
MD5 48aac9a56879d40f8432295b58623368
SHA1 7f711bb861fba9e1763251f5f78853de6af7f052
SHA512 68bc1cd74075276950398d0d3cb7e327cd34ead6a132b4909810d25b20eb3c38a4e75cb56a6f0c189ec10821565de8451ff40fa6e81d5c2e4c5f016921b660e1
SSDEEP 12288:65SpF9lZnOUaYL1/ubMAupbpasbGM1PnZ73ttYNCVAJJ6NNOC2k:656F9l4Uak1Wb0dl1f19tJmJJCOpk
TLSH
T1DC05F194326AD907C66647F10970D33913B45E9AA031D3C74EEABCEB74F6B816D407A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

866482

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Administrator\Desktop\Client\Temp\yLnhrZXRfF\src\obj\Debug\jJpJ.pdb

02112026_1439_02112026_Payment Advice_7435219.bat.rar

Payment Advice_7435219.bat

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

02112026_1439_02112026_Payment Advice_7435219.bat.rar

Payment Advice_7435219.bat

mscoree

dotnet