Order Specifications pdf[.]tgz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order Specifications pdf.tgz
Size

667KB
MD5

20ce483ba4810ac7ee555ae4a16b65d7
SHA1

53f89d204a7967e11a00d196e564e90c51dc147f
SHA256

c4eff012ea9bbc44cbceb76b8e9def8980f7cfb1dcdd49b61caa26bf2aa37af1
SHA512

dc4e070f38bfd284f0a696bc28bc9a9eef679e5f604d23807e6b99d6c83f78cbb96a6989be9b877133927cff3fe9190db7eb46967dac5e91566b5dc1a4778587
SSDEEP

96:AVx/U3Fau0sZkIjwpjIxJ7LrTZQU4WGgxij:29wFaNsa5lIPPGhsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Vzboapqsk.exe

Files

Order Specifications pdf.tgz
.gz
sample
.tar
Vzboapqsk.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ