PURCHASE ORDER 091020[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PURCHASE ORDER 091020.rar
Size

642KB
MD5

240f052cd9b3267c2e88fbca8d46015a
SHA1

899b2b6d25dae412c1e7b45bb5295c33fa4a39f9
SHA256

e0da3238356f21885951bc8b6e7436046c55e32151c79e9eb018abfbd70d8882
SHA512

2b215f36904fa7531b96cca386311b7a94a26740904df020227446d039d376f0a901a6d5f41a1040f26569c7010deb3c8ab55e719351f2be81519798366b826b
SSDEEP

12288:4vChZ12zSZz8mSUwuP2qR7lwQwjf82Htp3ilDNDVDt6bWPNaTguk4mTx1AIEHCQ:wcZ12iz8Rxi2W7lwQwgq3iB9VR6waTgs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PURCHASE ORDER 091020.exe

Files

PURCHASE ORDER 091020.rar
.rar
PURCHASE ORDER 091020.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 884KB - Virtual size: 884KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ