06b13467a82424708ac66c42f47e5e41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06b13467a82424708ac66c42f47e5e41
Size

724KB
MD5

06b13467a82424708ac66c42f47e5e41
SHA1

bbfd980876281ec0719d1b875625be1d800493b8
SHA256

38c1a59d5e3fe6711de230bc1f9ac0334ea8f0f7fa6469a666ffdf9ad49bb7da
SHA512

e68ee89d3d6b19258bcc3fa457e8b57bf5bbcba0b4590096c0452df9b7948c8cce709712417d0792ebb66abddb4659edf63546c2be162b3046e1298649ecbe07
SSDEEP

12288:OZpSSftsvBn/YOO/580mf8C71g9ZAOGMXuPMH+zyN5xMxtjfASY1IQiYe:jSfOved80ZugTAm0mEyN5ixtjfpSIQi/

Score

1^/10

Malware Config

Signatures

N/A. 1 IoCs

N/A.

resource	yara_rule
sample	dropper_html

Files

06b13467a82424708ac66c42f47e5e41
.eml
- http://www.gdi.com.qa/
email-html-2.txt
.html
email-plain-1.txt
products.r00
.rar
products.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 800KB - Virtual size: 799KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ