01f79ac0c3ebd21408c39739de2ddaa6dba90e638e18b77ddcdb69363c798e41_JC[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01f79ac0c3ebd21408c39739de2ddaa6dba90e638e18b77ddcdb69363c798e41_JC.rar
Size

552KB
MD5

dd0cced0a668e9faaf682e39e7532561
SHA1

4e3fa554c24ce2d34bf51f4b42943015e557c4a8
SHA256

01f79ac0c3ebd21408c39739de2ddaa6dba90e638e18b77ddcdb69363c798e41
SHA512

c81f14b319fd44ac7339a88412edd16cf13c1c3b22b9568f2dfa5710a2e4efc01c51f0933d1ff6c210e88ec641d0a5416409c22a31f6d1201c89277afe23fb80
SSDEEP

12288:fbub9gaFvzhnGIwsACXKCNtn/ubepD0WQ8FALcIWeNfH:fKuaFvzhcsjXXn/QeHFiAuP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PROFORMA INVOICE.pdf.exe

Files

01f79ac0c3ebd21408c39739de2ddaa6dba90e638e18b77ddcdb69363c798e41_JC.rar
.rar
PROFORMA INVOICE.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ