19112023_2225_16112023_Faurecia Orden_pdf[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19112023_2225_16112023_Faurecia Orden_pdf.zip
Size

604KB
MD5

f8f93cb3f610d291d068d236931670cc
SHA1

87fbf74e15eb92ad486b94333af88c1180dc7d27
SHA256

cb26aca191e2821da4db5b6cda77befad1314b6f17eb7513906865e72ac364bc
SHA512

5f42757b32670a597c4ff9449e3f2a78d74fbc77870c808e84dcbae16d3abd92d7d17e995da2dab05e01c6daf515e692f8ad6af4fcbf1e461eee2e938abaa07d
SSDEEP

12288:DIGbYXmos8xnfceqFQOV3F/WJdXGAfk57/2q97RgzeZ7VppEZ4Is1ofjfv:DIGnB8tfcsAtWJ9nM57/B9dgzeZ7V3En

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Faurecia Orden_pdf.exe

Files

19112023_2225_16112023_Faurecia Orden_pdf.zip
.zip

Password: infected
Faurecia Orden_pdf.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 828KB - Virtual size: 827KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ