Purchase Order_sk1109811[.]7z | Triage

Sharing

General

Target

Purchase Order_sk1109811.7z
Size

950KB
MD5

51341bb801e5d6b9804ab4d3fb74301a
SHA1

2a8119a672efa49b26fe4fe2c8a0053b3c427242
SHA256

dd80004119d19214664bcf3a51cd2f6139338aab132b42d273cbfb002cfd5f21
SHA512

0eb3056521593d152a88b2d920adaa25dff9da14b0b97587bdd4dd15aa95070610d45a094ac98d94535c46b33010ead578127aad6579d6919626ebffaf08cd1a
SSDEEP

24576:nnmOgrSN4YeZrEcvhZYHFj5axxDrCgboQHVhEm7YAeN:n2rK4YedEIfcjaxDrC+HVsZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order_sk1109811.exe

Files

Purchase Order_sk1109811.7z
.7z
Purchase Order_sk1109811.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 819KB - Virtual size: 819KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 598KB - Virtual size: 597KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ