Aldali Int'l[.] for Gen[.] Trading & Cont[.] Co[.] LOI[.]r00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Aldali Int'l. for Gen. Trading & Cont. Co. LOI.r00
Size

556KB
MD5

30354d8f48d08a9b6a6e6e53272c9ec6
SHA1

5dd0ad8be864d42e2b2fb04c150f3f022a36e011
SHA256

d297377b166f23fb117c8a9612c7817d0a179fc501abe273c3e5fddee7bcc525
SHA512

f686980b536eb25929603a4556e775c3c940a7594997819316cc4ca7b1c2743b012b3e08178d0b06aa324e1f7bc43cf012e24cef87e274793efb69c3122644f4
SSDEEP

12288:bNl/pSISFRtmMWX647OZxkRxnBNoabgwezNe+w:NLLKmOZxkRNBNokyzNen

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Aldali Int'l. for Gen. Trading & Cont. Co. LOI.SCR

Files

Aldali Int'l. for Gen. Trading & Cont. Co. LOI.r00
.rar
Aldali Int'l. for Gen. Trading & Cont. Co. LOI.SCR
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 591KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ