SAMSON A[.]Ş[.]%30 AV[.]ÖD[.]DEKONTU[.]27000EURO[.]xls[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SAMSON A.Ş.%30 AV.ÖD.DEKONTU.27000EURO.xls.7z
Size

576KB
MD5

920a2ac8ac8993128eb81fcbcb1e4b29
SHA1

abd5d06f4c3169864ed6da957a944f896c117256
SHA256

7a54ae41f94966139ade0054768dd90833b2ba4203e14dd5fd2748325aeb7ddc
SHA512

971410c6d322eb8f418f45a39ac2768808a111d8681412b352f643bf7295fde3e95b032a2598f046a7c0e93cbb1b185427e4ebe838a8762d4158be40f390b71c
SSDEEP

12288:9Gec7NDoklmvNP7opQsttd/Km6wocDjer8gaSQENU42iZMw3CJ:e5Dokl4NhstaQAnrZMw3CJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SAMSON A.Ş.%30 AV.ÖD.DEKONTU.27000EURO.xls.exe

Files

SAMSON A.Ş.%30 AV.ÖD.DEKONTU.27000EURO.xls.7z
.7z
SAMSON A.Ş.%30 AV.ÖD.DEKONTU.27000EURO.xls.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 594KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ