New order 500384851[.]zip | Triage

Sharing

General

Target

New order 500384851.zip
Size

598KB
MD5

2e213340620c52fa4e62d6705f13d03d
SHA1

6e6bf6f4e4699eec69ce01788f4fb4d0c181ad9c
SHA256

4f6cb29e8a02c3176273aa443173fc881e6678181ec1c9a1f163a02d313eb3dc
SHA512

2803a78d61d1910400636f60a9b2b9613bc2fa129b691b04f3bc24f8f7124218da3896be74074c24f2682e81a8a95938e8cb4acbbbebe548f4801d1c8309cf69
SSDEEP

12288:Xz/U5ggxOKZnNnEOFj2q4vRijK1MDJL5tyVEmeLwWIPvEyfzYpSrt7eqG:Xz/uxFNnvF6q+RijtDJU/eCnEy7EAeqG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New order 500384851.exe

Files

New order 500384851.zip
.zip
New order 500384851.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 731KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ