Order listr_1[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order listr_1.rar
Size

544KB
MD5

3cccdac28500a7bbd2e5d47d231a5c44
SHA1

d49018730b2213ef4ff40b76843943f48263cbc5
SHA256

e78dfdd56b50781ddb0114479a2efe0e2f9e4e663ab48ddcc26d6cee39dca08c
SHA512

587e258cbc3d0d2f4a9c2422a34b41b71f7e60a29cb65e0328b6773435c8d1ed338f9cfbc7864066829ec85aaa422e214df96d4d6cb8c611c710151267db6ac0
SSDEEP

12288:ya4rD5H9zed6J1QXqIKwYTk2xk+b4K5AIu2nnPI1I:ya455ed6JgKvDxFr5AIu2nQ1I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/samlple order.exe

Files

Order listr_1.rar
.rar
samlple order.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 645KB - Virtual size: 645KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ