NEW ORDER FOR JUNE SHIPMENT[.]rar | Triage

Sharing

General

Target

NEW ORDER FOR JUNE SHIPMENT.rar
Size

699KB
MD5

f2470d3b522a147bf0f3a9777cad94a4
SHA1

a69376fb9fcc081df0fec7ad2e07464af8431bd2
SHA256

5c034cc3f93fcfe71dd6eb66ae101ec878c12ae4638eeb90774b5e0b9de86996
SHA512

dcef2217c8d2899550e60eb02dbf760e679d76e4f253fcccf41cd563b2897f4419367104ae4c3312a5b0e42927a7cc89728044fb3c3d9ca31bc7a672bf81c810
SSDEEP

12288:bIL54zRNmxJ/AxToU70PCgEtWqNJSS/vlnk6vZIVjzv/eLAr/fT:3jkAxTos+AJSS/vlk6vZ6z3mC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/JUNE SOA SETTLEMENT.exe

Files

NEW ORDER FOR JUNE SHIPMENT.rar
.rar
JUNE SOA SETTLEMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 828KB - Virtual size: 828KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ