6117e924f0dcdd69aed7e1327a1889122d30e13b68e24fbd8a75001aaa56b064 | Triage

Sharing

General

Target

6117e924f0dcdd69aed7e1327a1889122d30e13b68e24fbd8a75001aaa56b064
Size

46KB
MD5

cc25e7460f0f80976c4240e3da1af312
SHA1

9de606c2418ac588bddc7fca9b214b05d5e56b5d
SHA256

6117e924f0dcdd69aed7e1327a1889122d30e13b68e24fbd8a75001aaa56b064
SHA512

f6b7fc17041ca6368caa15bf5ca4d94f6ced1f87042bc228baf51426b1ff0db3be18b5c302f4cf4653b87157143f942bf9805fc5939f1f878c135b401b9ea129
SSDEEP

768:0x4wR2DJZfvMr9aQI90hutaHijc6grxByigmsaX8QxmV0ovLeyIsPt0SgfiJeWs:0KwRAv3M0cu6iw6PIBgDzey39AH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase_Order.exe

Files

6117e924f0dcdd69aed7e1327a1889122d30e13b68e24fbd8a75001aaa56b064
.zip
Purchase_Order.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ