purchase order#627203[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

purchase order#627203.zip
Size

486KB
MD5

e5c6933199be77402e0a28c09b52476f
SHA1

06c24e1a05e483998a9b2bdc09ccb576e177f04e
SHA256

8143a5394c44396b5b1ecc124f07e4562257d64b7dc2fe732e5248ad855aba44
SHA512

d6980a2a7dd0c703eb97b39ca086080638852fc8e591b6fba26a7a519f72434d992613778931516cf28b3e88f139fe3f600e3ecf606df127fd07bb6205d2e1b6
SSDEEP

12288:aIcqYofu+7aX0hu8sSJvcph39cWuLkyQMhFOhXTjah:aN70hfsSo39cWuFQMfajo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/purchase order#627203.exe

Files

purchase order#627203.zip
.zip
purchase order#627203.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 571KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ