d1a0201183e93fbfb55ed1c19732b97d0e499a70dd96767678ea8bfd28eabfde | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1a0201183e93fbfb55ed1c19732b97d0e499a70dd96767678ea8bfd28eabfde
Size

683KB
MD5

4313422afda74e80ca6a7f388f05b4ad
SHA1

eb61f20b744e7b8486ab3d1226c76e2432db71c4
SHA256

d1a0201183e93fbfb55ed1c19732b97d0e499a70dd96767678ea8bfd28eabfde
SHA512

c614b398eb4329eae707a1123d711ae7561eec5d1d1cc5c58c8977881ef85d7e48fa8cf487ac7053d1f012830ac58869b8a5a3cf42342ec9f627a1859e59b5ea
SSDEEP

12288:nK2aaX3lhb2ulZEByYDZReedhMP+oucE+EooOzrdcAvX8dLgC6g:Kahb2WYyYdRZPMP+bnQ9MdLTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Invoice & PL.exe

Files

d1a0201183e93fbfb55ed1c19732b97d0e499a70dd96767678ea8bfd28eabfde
.rar
Invoice & PL.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ