VANTIEN PRO JSC - PURCHASE ORDER[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VANTIEN PRO JSC - PURCHASE ORDER.exe
Size

165KB
MD5

726c6f3e4483cbdefd244aaad1e460f1
SHA1

51ada0a53201bfe242b46a8b37250dd9f040789b
SHA256

6f57f5e9ffc2a1fe68a368d66c647a9d0eaafa4684322f4d2ae3115ac8c889a4
SHA512

7c571bd2bb39f8f563762d3c1f6be8c2dcad8eb51daff351b9ccc037f2288819dbc52659c692ba67088d914264c0144423ab85672cb3db894c835243eaa4fb5b
SSDEEP

384:6Qf+70+7L+AqqQaRRYLRRp/KRRHjb7dNNYrLCFxlDxaRUm0U5:j+OAqqUKFxlDxesG

Score

N/A

Malware Config

Signatures

Files

VANTIEN PRO JSC - PURCHASE ORDER.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ