NEW PURCHASE ORDER[.]rar | Triage

Sharing

General

Target

NEW PURCHASE ORDER.rar
Size

95KB
MD5

ceca5d3e6404c981b074071200e339c7
SHA1

6bcdca873e87495da25f9179b94ceaa8742d0bc6
SHA256

f2db9e38a9d73b26276feae9b738fe76b95c16a9d8c5d1fd410f613ce0c4e0d0
SHA512

19dc4de55606fcdc877d5214880d3b9f19876765c076bda5f4fdc100cac0902872269d7cfd04dcddfb2f57c2f8b68a641d54af028e489e728e5ea9a982e0bc1f
SSDEEP

1536:sFfcf1P9tCnZteZe+ug8BWyWVd87cRZMyJnjbd9lTuv4LvrlqXZAVa2c:sxc91tMSeDBHW8sJjRf3LAXuVal

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW PURCHASE ORDER.exe

Files

NEW PURCHASE ORDER.rar
.rar
NEW PURCHASE ORDER.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ