June_New_Order_PDF[.]r00[.]zip | Triage

Sharing

General

Target

June_New_Order_PDF.r00.zip
Size

529KB
MD5

b7e4817bfc831705fbcae7c2edfcafcc
SHA1

199a2ee6477fc7013c4e549b83c577f583bafabc
SHA256

d44c2fdc11095eac5b1e8e8c3746d0194d389f1ddc2d501b8361b8ade5948539
SHA512

4c07c17b4494fe2c611a0e6bb35475f3078ab38a7bee9da63666ec87ea9c90e31bde807d2574c71191f2ca85f29257c31e92b9b5096753a2bdeab4e39f8c5365
SSDEEP

12288:GnLf/bRdnnRNy8LgKAiOA+HglPrNgYnftcAIho00Ff0o6+:S/bRdjiKAiB+AxZftwi00R6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/June_New_Order_PDF.exe

Files

June_New_Order_PDF.r00.zip
.zip
June_New_Order_PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 689KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ