Outstanding Invoice For PI91328[.]rar[.]001[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Outstanding Invoice For PI91328.rar.001.zip
Size

949KB
MD5

d614e9ab7640beaf5edb468405f6bbe2
SHA1

aa0716b71a27a37d3b2ebd3cbbbf4297a872c235
SHA256

93354b5b86890a737f6bd5f55c9d70ac85c6d6f1fdec66cd8bc7b5e2076f24cf
SHA512

b42249927152c07a1c6c1a26f600ee5aab7e996e484a034aba12bb276926b12782bac53a45415dd25e00c31cae27f9ef7e0cda2c2fc9b0bc410cc99430d58a15
SSDEEP

24576:tkVG0DV3nEuawIF1Gg7iEkrvL7dWnCwdm:tkzDFE7wQvuEU7dWnddm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Outstanding Invoice For PI91328.rar.exe

Files

Outstanding Invoice For PI91328.rar.001.zip
.zip
Outstanding Invoice For PI91328.rar.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 764KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ