PROFORMA INV 110856[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PROFORMA INV 110856.zip
Size

443KB
MD5

9bf4fc443d49804c2b163e89ef2ace24
SHA1

b92f485ea1155b11719f74f48502259e80fa3ed7
SHA256

6c7f4518471ef75d742805a28c2612a2909eb82ebdb5adedcab3081fb1d13854
SHA512

57068677b2b37c42275c063a9f181bbbbc4de881991a501dc3b8e12c7fb822573091f36d5fa45c9cca723653ff8f54c9f69bac70b5bdceaeeb42adbf23ed76cc
SSDEEP

6144:mdxgcs9xBhisQ9c9XG5qbLcMNg6EkRRMMYnKTU7pLFIbWYctolFCrmA5hcPMtmCP:mdiLOXc9X4qbGTCoKTgFub8ysF5hpDb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PROFORMA INV 110856.exe

Files

PROFORMA INV 110856.zip
.zip
PROFORMA INV 110856.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ