PURCHASE ORDER 091020[.]rar | Triage

Sharing

General

Target

PURCHASE ORDER 091020.rar
Size

640KB
MD5

27ac8d179c81931002e7b5dcedd5b39c
SHA1

9bfd70ce874ca941e114c0f7f9537b0442d19333
SHA256

ce16dab292b2584167485454ad2a43516f23033128520a10a2cfbf8c8e7ce416
SHA512

e5107d014d27326a240a268bd9a93fe030b8bc1e740b3a9cb73644dfd0a538338487540cd6472e1fb983ae2e264583f57489d901e6dddcbee89141f8448b8685
SSDEEP

12288:7K5XYkW7YY0tvSoRLZFhTcSsIlmAKopuQfr2zU0X2wNKVZqX3:7K5XW7YhtvhNuIQAvpuQfyzU/wNKVZqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PURCHASE ORDER 091020.exe

Files

PURCHASE ORDER 091020.rar
.rar
PURCHASE ORDER 091020.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 883KB - Virtual size: 882KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ