Product List[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Product List.gz
Size

512KB
MD5

2eb6e06254853c93c53b824f0f8c1941
SHA1

6adf3d5ad3b58dd2bf4924d04d3c192c87bcc58c
SHA256

790042804132b8fbce26f6779bbd68b44b8ab5608808e0e42c43a19b7829d929
SHA512

36e54c393c5251e32f9630ce68d4e1bb615c03cb66f06a55f70f8347f3517723978ab982434f52b7e2dfd7048330e6f00634c4ac7da2e858a8789b55e18d4346
SSDEEP

12288:MqmXBHenpu7y5aoEHInarGCURdJmYYnIg/Tt5N6yuhYYC2R9/67:MqSBHj7ywdotz7gYY3B5N6yizC8q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Product List.exe

Files

Product List.gz
.gz
Product List.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 639KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ