#PO 4500515595 ULTRA TEC_1[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

#PO 4500515595 ULTRA TEC_1.zip
Size

528KB
MD5

2b68e5d464030eb75cf019b4a2c56b19
SHA1

fa02c98a2fc185210bccc0abb2c49452a5d68eaf
SHA256

6153872c1610031f5242968a5b2818fb307f800886262a0e932e9bcaeb980859
SHA512

471ab8343d4221fc44c667f458950ec1df4b9a959cdaf74af3c87595bf93c1acd0b5da249c935a6ac10b09ed65cc46ed2cb14fb47b93b7141d0fc0ba0180966c
SSDEEP

6144:YhE2wHBifFEjZLNOjEFaOS10m5B18O2sBdE84REyntjCrGRyGfqjyPIrUzMjtY0l:8wHxyHHoAy95MnVOPloO075vP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/#PO 4500515595 ULTRA TEC.exe

Files

#PO 4500515595 ULTRA TEC_1.zip
.zip
#PO 4500515595 ULTRA TEC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 541KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ