Purchase order #10009924[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchase order #10009924.rar
Size

614KB
MD5

fec84f73fad8937c03ce55bc1b22a416
SHA1

38290fb99f78abcedd8f0b83e121e04b3df19d7c
SHA256

4183872bd7e864f4880e58c1817b19b859b08e254c93524056745194c49e7db0
SHA512

6b4d64fc885148472909bf55bb68859e0b261c40cb6dfd43c4db59506a8b8aadd4ab47e9b1f4b80ffcb4787bd8ff4df3e3ec3584c05efb9ec76911920b6d55ad
SSDEEP

12288:76k4HDwIIr2nKqm4SxZxjBmRVJVOX2czqrFbI3YWEOL:x4HkInnKqiqxOXlzqrCYW/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase order #10009924.exe

Files

Purchase order #10009924.rar
.rar
Purchase order #10009924.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 699KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ