Amended Purchase Order 5180962[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Amended Purchase Order 5180962.zip
Size

716KB
MD5

f613a99144225369d540e9b00618e19e
SHA1

9c50d2b2bfb5dbdc4564e9aa14550843a3120d98
SHA256

2ec421662543ccc943b335a4c9357556df5827a4bf980236e880b7ab939157ce
SHA512

b212ec9f17c08c96dbd2e0740c2ae27ef63ec0f8a4d26121aba35f77fb7124a6a680ecfb61034a4e1777974db87eb7c71fbf4813904ea508c23b2da4bbb95e0b
SSDEEP

12288:Y5FPU1O+8xhmaobW6V+1NbzKUfEkXyIo67gX5Z0pRiMDbS3L3M4P8NPo3EdIdKk:2tUO+qEIj/fEzILgpZ0pRyb3M409o3EA

Score

1^/10

Malware Config

Signatures

Files

Amended Purchase Order 5180962.zip
.zip
Amended Purchase Order 5180962.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 901KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ