orden de compra pdf[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

orden de compra pdf.zip
Size

529KB
MD5

606a83b6a36dfe1b8edb4d6a4d23dc8c
SHA1

b1bc81b1729b87ecfdb5be904b33694830bf5c00
SHA256

ce221c66109b6af34ba60e6752255c2c72f3923c651e2b5c80ad8b791ce3b6e7
SHA512

99bc08676adfe7d4cb50674474753b9a246c2b585101ad72cc36737b6b6ef8a18b7cda84f5a1fbd66faa62cb192a63354d70cf916cd63f1cf1e618f6699871b2
SSDEEP

12288:v4ufKN3/fUhB9NjHcpyOksmYlck7m+mzILUsvr5TJIay:HfKNPsrLHcpyOkT1ambzI4svrZJ3y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/orden de compra pdf.exe

Files

orden de compra pdf.zip
.zip
orden de compra pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 549KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ