PURCHASE ORDER[.]zip | Triage

Sharing

General

Target

PURCHASE ORDER.zip
Size

413KB
MD5

11cbe548a55455b43979fcc32744ea0e
SHA1

a7f825fcd93f3dbad83198ea2227057129152bde
SHA256

0cc3029664a931cfb3c215fb3b946008af071d531de7a792ca07cc79572a789f
SHA512

3820fd02d69f053f4c29af047e28733bf3fd4ad6d507e54f0954a9f8853afed28f569b51d042940af3c7175cea4f784da0420a010ff77d3742827caa9671be48
SSDEEP

12288:Tg+ItmDJ4Y9mZyH+qHJ5uE6thF/LMfeDXa9sE1J:114CtzA1L4mk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PURCHASE ORDER.exe

Files

PURCHASE ORDER.zip
.zip
PURCHASE ORDER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 665KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ