nOrder_ APRL 310377FIBA00541[.]z | Triage

Sharing

General

Target

nOrder_ APRL 310377FIBA00541.z
Size

956KB
MD5

fd61fba7947a52f46d16fdf323c26b32
SHA1

19c20acef1058b544e0e57a2af786dc5e5929024
SHA256

82851f54c4fc23e92e24cb1217a523b6fb7e7c1cba70ef55de6cfc61892c35b7
SHA512

9e21e8038ed4862ff78cb52bce55812ce16f41c21967503e61f618ce17595f07d40a8ff8c6fa296893b404ff9f72c63cf5e7dae2cd727f884f3cefdbc7221cff
SSDEEP

24576:SSAzcXXbi74sGm6ekYHL5y4WCWM1hwTHJWabsk:SSjXQ4sGm6XYHV3WCWxp7b5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order_ APRL 310377FIBA00541·PDF.scr

Files

nOrder_ APRL 310377FIBA00541.z
.7z
Order_ APRL 310377FIBA00541·PDF.scr
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ