contract and payment copy[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

contract and payment copy.zip
Size

626KB
MD5

f628caa18ad7944b7a45c95b7d8adeca
SHA1

0d27f0600d256cb00aa3a89924e8de9de7688571
SHA256

b79e15432c5d072dad863ebcbbecab43542e9792d125f726212bf7556dc8ca00
SHA512

3be58c428f7c026944e483841c6520638157d4828dbc5386f9a092a77fa214916440ca7c444f8280fd3ceced8dbcb0e891cda8db86f4acdbf46712b52ef963c3
SSDEEP

12288:h7Xp0HWyj3JrTVlBzqH0nsYpMnALE1R69Fy8mQDjEB91TVc4w9b7LZfTLr:h7Z0HWyjRVlB+HoGcETQFnDcB9tVc4Wt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/contract and payment copy.exe

Files

contract and payment copy.zip
.zip
contract and payment copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 699KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ