Purchase Order #2602360[.]r11[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchase Order #2602360.r11.rar
Size

511KB
MD5

414fe3bd14091b302195bc0a32ea57eb
SHA1

b2bdb319deb3995eb5d26ebcb6a8d121cbe7f139
SHA256

bb4d98148593cdaa883bd1c9ad47b485c99c0bd4bf7df7adb317f6ad89228989
SHA512

cb43b089809517189b0af74c3390bfbe10733325dc1f5331abd14a71b0521a7f2f76f799b7f1ef7aa5d2b2991e6bde4c4c0845e5bc6c65f23df47f72664ba4c4
SSDEEP

12288:QjV56qgmn9jIUAmrXxAUIpH4c3RTk5Pb2g1TPljowy9:AV5BgeCmjp83RTmPqk5owy9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order #2602360.exe

Files

Purchase Order #2602360.r11.rar
.rar
Purchase Order #2602360.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 617KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ