Purchase Order,doc[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchase Order,doc.zip
Size

617KB
MD5

cada74f7a9863be3584acf8933b92a80
SHA1

c168cc46d7dfab86341316a3cbaa6b2a0e626bfb
SHA256

b52be0c527cd2f67b3c88472a02fbb50a194db1a0b00eaeadd446554f1247e47
SHA512

6e8b8321c80b2d3891006e90b1c5125e0ad49f3183b3e4d136c5b0ba5a56c478e4c3d9a7c8816f50a12d82f913afb37ab34dc6ebfacdb96eb94c8158431f3d52
SSDEEP

12288:RDKlkffkvmwkvNfXPBGs/ZubJnTnQAhOKGUnSe/vbj+YptlniWbEINn9d:RDaVYXgZbJnbWDUSeX33niWIaX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order,doc.exe

Files

Purchase Order,doc.zip
.zip
Purchase Order,doc.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ