PDA Invoices[.]zip[.]001[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PDA Invoices.zip.001.zip
Size

820KB
MD5

3dd1f68f16c0f3d9943b71a69c79a9ca
SHA1

3448be1b42ca2e27f17fb3b696bc92cc29fd6d10
SHA256

1a0877854d1dbca39a40b3c89b4474f59e2f8a8911245ce49f88512a951cb271
SHA512

c3ddd7b20e73b243b007711e619228e0423151455c7b8cce62695ce1da75ae1141b7d0600b7fade42a08265a5c6ece1680cc1f9769b46d058535c8f1eb95817f
SSDEEP

12288:AQl07NqawDM2GXBvu1+mSmHoZVwzEx47VWcrDCfAaWDgUlI1etONdZ+fKuVja:AQlSMawQuAmRHQVwzEhcnug7AN+fZja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PDA Invoices.exe

Files

PDA Invoices.zip.001.zip
.zip
PDA Invoices.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 898KB - Virtual size: 897KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ