Purchase Order (PO) PO 00197086[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchase Order (PO) PO 00197086.rar
Size

836KB
MD5

ac34a5788979dfb44a1810f9eaae9d18
SHA1

ebf277bb36acd818a06f286fc2a9f54cdc4157fb
SHA256

184616f86b3d2477f744388932728a70e89f31ba380b0b2ce13a7c37b3a109bb
SHA512

92150ccc0130bb75736614fd60e69435e81bc843521f03cdc96fa85b2ab24fbfdfc7b86877e62fac9c49f6febfe245b358ba2b09d6f8fbffde2c4fc448cc370f
SSDEEP

24576:PmObp4tCeZkL4JNOmi7TrtRa+tSqxn1tpfEwNy1dVEi:OObOrkiNPiJFPxnFzNyX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order (PO) PO 00197086.exe

Files

Purchase Order (PO) PO 00197086.rar
.rar
Purchase Order (PO) PO 00197086.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 968KB - Virtual size: 967KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ