ORDER #771490168489pdf[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ORDER #771490168489pdf.7z
Size

314KB
MD5

0350ae3fe7b8e134d77fcd99ee13253e
SHA1

80783e3cb0134092edd0e76a11ccc6bd98ec7748
SHA256

c708d70d9c17d34cd448e0d12faf2aa57f5832dafb28def4978fbe12a9e8f08b
SHA512

b3ca7beeb5afa8fedd51215f119953c645b2d95dd9bfffc71c6da65310fea2f706cc1390c18089da78626bb058df6db9a476ce1c7b819c9a6629ccb01eee71a0
SSDEEP

6144:wnWxARbz9OZi7H2IMdBsBFw8jsAOO1glinOdNHEEEjwK/tluylcj4VJ0Bd7lV8eH:mWmRbzLr2IdFw0s1O1gYyHjEjlBlcEuB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ORDER #771490168489pdf.exe

Files

ORDER #771490168489pdf.7z
.7z
ORDER #771490168489pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ