Purchase Order No[.]1364[.]zip | Triage

Sharing

General

Target

Purchase Order No.1364.zip
Size

591KB
MD5

3737598db903f0392c44b77883e66f14
SHA1

af45b03e856789ec413f0fd423f608fbe3249857
SHA256

26e1993ab6da585a3826ae11ea56d87a587371f0d50ea64afaea843212dbfe17
SHA512

294e7dd762b828c0ee13b37c1ed6d4b305882848764898799807438ebc0c8dd4d552aab25dd798a585756041d6016f226c1ba5d42ff3bd66acb175aa45b7e4fd
SSDEEP

12288:kelPITUMzc4CKXMo868BUvTIriYUs/nz6WyB9gmgh18Yf8EO2Uk:kBTUMojKXMEcUvTW/N7+B9gn1aEO2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order No.1364.exe

Files

Purchase Order No.1364.zip
.zip
Purchase Order No.1364.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 620KB - Virtual size: 619KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ