611ab5851878351bc731ecb73be4c28f00ac717cd2694d181bf05243ff638783 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

611ab5851878351bc731ecb73be4c28f00ac717cd2694d181bf05243ff638783
Size

591KB
MD5

00799173a0e5f0ff5e17edd2b2366771
SHA1

93a8b23887299b17f798ed5055fb1b8f776b80db
SHA256

611ab5851878351bc731ecb73be4c28f00ac717cd2694d181bf05243ff638783
SHA512

2c4c01abde7d94512b1432956d6f2b976f413fd41d81d3b29351deb443be633f4bf1338234e37c8ee26b20ab743e6af0a07c461c65a3399aab6b87a076ea06a4
SSDEEP

12288:SpJ3oT8JRtKNQafK3eW0O9na9nHULw/FvMqlFmRG5V5/s89dcObc4bbDuWq+Yx:SpVC8JHiYN1w2qlF2Gm2tHbn9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Order Confirmation CI & PL.pdf.exe

Files

611ab5851878351bc731ecb73be4c28f00ac717cd2694d181bf05243ff638783
.zip
Order Confirmation CI & PL.pdf.7z
.rar
Order Confirmation CI & PL.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ