11102023_1713_09102023_Order Inquiry[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11102023_1713_09102023_Order Inquiry.zip
Size

8KB
MD5

7dfd0daf8379ab4943a36bf7dee0b3a2
SHA1

a120536cc6c397067737374e018609686a549203
SHA256

fac5587db1c0bf54af599620a58d5370561720309424e09151ad5d97a099d2df
SHA512

63f66881d05d7301a8aa1beec6851ee538433141ffd564725fb8279d0719cd1ed3bfebe08adc57f6ff0a37871fb8373a5613683489bbbb7f9b87ce06c6338db6
SSDEEP

192:M3wf0TCQkzU1NDGsTb6hdxQ0lt+r4xyDnYpB/BXpSu9MR7vDwhr:ff0iPkb6hdxxlQrYrB//SwMZvDwhr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order Inquiry.scr

Files

11102023_1713_09102023_Order Inquiry.zip
.zip

Password: infected
Order Inquiry.scr
.exe windows:4 windows x64

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ