[Harumi new order][.]7z | Triage

Sharing

General

Target

[Harumi new order].7z
Size

729KB
MD5

aff848e1b4da6d40c7b558753ebe5fe3
SHA1

65372621323926943ad307897369d3188693057b
SHA256

f7f610af2d143c403a5a4b6765be570090420f373d4ab5f6282530c9d8a32e19
SHA512

f9745153f97b7841372f84079a37897d390079f489b45bcc3bc01afe92a755e834a2748b009318011fe3917441db3bcc0a3246d7efb5a9ab339ee023f15cc3cd
SSDEEP

12288:4MTlAwLj5ri4TODXMFE0GCYsDxBkUGN3fOMORllGwWkjCXvZRUjZBXW4TCo8uhwe:wQli4cMK6xBkPPZqGpt/KHXW10w0fB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/[Harumi new order].exe

Files

[Harumi new order].7z
.7z
[Harumi new order].exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ