12bb2a983fc09ed07579c60d0e396551 | Triage

Sharing

General

Target

12bb2a983fc09ed07579c60d0e396551
Size

670KB
MD5

12bb2a983fc09ed07579c60d0e396551
SHA1

f90c37191d8a31aacc69c4ae3aec0328d53673ac
SHA256

75de6a436c06db361958df9e1cd39e7e72e44a8e202058c5dc93233a5b135e6f
SHA512

d0febdd220c2c4cb32716a51fdbdf6ad7624f9557ec3775ce237dc6d7b5862e55ccd86cd4002a8d711038b0187402ad480d89a9f090b6c6a55037ce33ddb04ad
SSDEEP

12288:reIQB5+xLusf2hru1otRmf9Ozg+4roWrnGtRSIf/NzH0yWb4LwzOh+4:BZETtYFPLoWzGt4q/NzHHWEEiH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Confirm received PO 4500640396.exe

Files

12bb2a983fc09ed07579c60d0e396551
.rar
Confirm received PO 4500640396.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ