197580bd418757b1c3483784384834f3427c08cbd8e6379fb26469078ef885b3_JC[.]rar | Triage

Sharing

General

Target

197580bd418757b1c3483784384834f3427c08cbd8e6379fb26469078ef885b3_JC.rar
Size

133KB
MD5

8f9d67bfe681efd632e8766722b4ddca
SHA1

869d541712fdafea22562e0e413c69efcac82142
SHA256

197580bd418757b1c3483784384834f3427c08cbd8e6379fb26469078ef885b3
SHA512

fba6332dbcbe0af27f8ecec80eacc88624cc57e11a28ca9ec8934ec2af594275b444aa369eb4bcfbfa24b893970f1f934e4ad174b3cacff4effcd8e853bc7e69
SSDEEP

3072:FK45sY4VjYuf2Gta4mVwxX9bmeIL1goTtpO+cbOTMs:FK4uY4hY3GY4mVQzImvlbGZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order.exe

Files

197580bd418757b1c3483784384834f3427c08cbd8e6379fb26469078ef885b3_JC.rar
.rar
Purchase Order.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ