PURCHASEORDERPO2611[.]DOC[.]exe[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PURCHASEORDERPO2611.DOC.exe.bin
Size

620KB
MD5

3d7a0dc96d4716930dc98cd805594bb5
SHA1

d4f221ac9016a7c693e5e75a2bb24d8826b81b09
SHA256

1bfb950deb3e17f180908c445173783b996cd3ef9c3b61b59b8ac67d96bde30d
SHA512

b2ad6cf20ccee2be1055eb3730d394194a1aa2a3e9a42cba0059482e9902e79401de776bf05fcb7fb8c041cc94c37139c4390afd3c6f64f91925c0fa9c1b6464
SSDEEP

12288:YbdIIfTDe+tgGj3B6inGA05927ywUNkvi4FVzOwdXNI:wmIm+tqinFC2uwMBYzOwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PURCHASEORDERPO2611.DOC.exe.bin

Files

PURCHASEORDERPO2611.DOC.exe.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ