ORDER_CONFIRMATION_CAHF2310445[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ORDER_CONFIRMATION_CAHF2310445.rar
Size

670KB
MD5

5b9c006a2a8d4f12b3aee85986c10323
SHA1

e84d60d3da0e58a5567bea624a85b2780a578005
SHA256

0c63ffb0d14c841af97d10ef9de15150d23ed53ea716afc279b465e9caa8167c
SHA512

ae4aaae9ef0e8b61aa57cf3bffc4ecec35de1a1640a033198c72f92def6c96816b6a13b0e741abc6fdc0a8f2466638de4f27382067c0a648513aee97a9701a43
SSDEEP

12288:AbGJIgFoQtcSqQWVENXiqD0yMQdd94SFQY3/IqT2WnsFerZjwkQh/M9awjBsn:ATgyQXmENd5d3FQzqTTuajwLU9awjBsn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ORDER_CONFIRMATION_CAHF2310445.exe

Files

ORDER_CONFIRMATION_CAHF2310445.rar
.rar
ORDER_CONFIRMATION_CAHF2310445.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 799KB - Virtual size: 799KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ