KIEFEL Packaging GmbH Purchase Order[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KIEFEL Packaging GmbH Purchase Order.rar
Size

373KB
MD5

5f2547b76f3cd5dd54b4228439800843
SHA1

18eb0a8d1bfe8ad159bdd7b7ca2dd1e4643eb455
SHA256

2720497a1081f75fe679730d3d4efa94f1d3ba637b5c82833e5d8c98f7116197
SHA512

997e747232469742daf6e7b3c12dd6a13d2149f047ae39e34c6f82eb4f1bde36bff41b56196af49b9a62d656b22b581ac276efa29f499e6e6936880fe35d684d
SSDEEP

6144:tcMQTjichKRRMPG/OxJrsthFnEmmHBYiQaNxsE2XZ9psoU2O5xlI6E7:yichYMu/2JSFnEmmHBYijsvZHUP9I6S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KIEFEL Packaging GmbH Purchase Order.exe

Files

KIEFEL Packaging GmbH Purchase Order.rar
.rar
KIEFEL Packaging GmbH Purchase Order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 619KB - Virtual size: 619KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ