Ningbo - Invoices - Past Due[.]7z[.]001 | Triage

Sharing

General

Target

Ningbo - Invoices - Past Due.7z.001
Size

768KB
MD5

a17759c06b57c853de4253ad2b94023c
SHA1

60cd2809f9a5b8a9f47ec1c569c1ba7c5c8f1c01
SHA256

6f308ad2e03103c1ca1ed5537d341369e4d35fa0f377597ca592894617026b62
SHA512

43c21fc2a91cbd96380aef9592b415d3ba21fe3a6e398695d9079ba0c072e95ab733fb7001cb0a961a6731e656cf18670e277a726225755a9143b728c434eef4
SSDEEP

12288:pxftwIjo4kDw/I0Pzhf6EXsifNUXZdxlpdmixzgjk72OAg+rkmgVYx42H1diFVS6:ptVkBilKZzcYzgjqEgLVY51c/SUTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ningbo - Invoices - Past Due.exe

Files

Ningbo - Invoices - Past Due.7z.001
.7z
Ningbo - Invoices - Past Due.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ