mkpub_Price and Quotation List[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mkpub_Price and Quotation List.rar
Size

598KB
MD5

486c110c87da03c88e2d0617ddbffe97
SHA1

a60e3bc5d2a26e058ec6bc66175943ddccce5dc0
SHA256

82decd323dd0566f21e27a3b2feda4b6e963421a0895cd96197967fd07f5b17e
SHA512

2a2d22830c874eb1d25bf35f6b262064de63a9eadb6520f17067b072b2cc164cc744c8114caf1eb7f286c4e6abd77d9b7a18747af72cf9ef793dfd832f8668d4
SSDEEP

12288:uU7fp4tUDtKRuWH4h7b/Kpa4N4+DHcOuxgpcAxmVtgD:d7xYoyu57bK04qO8Oumpcw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Price and Quotation List.exe

Files

mkpub_Price and Quotation List.rar
.rar

Password: infected
Price and Quotation List.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 681KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ