2bc9a7200e3195ae8143aeda3c972eec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bc9a7200e3195ae8143aeda3c972eec
Size

640KB
MD5

2bc9a7200e3195ae8143aeda3c972eec
SHA1

3d17f0a7af181e491d24e00a067b1460dc1f30bd
SHA256

e4850597fd4ae26489658f15a2cd6f412c5575cecfae7c8890c699c8a798c263
SHA512

1bfb9da54a6a59f56654af4a936f7f5acc309523ae3d99c69fdffee6b68792d19e7a3bde3c9923b46e806f68e368068406efe70d76feca4474bee42a782e8b22
SSDEEP

12288:tJp/ED2iUnZBlCcR2DJlekd/Ggdjtw2ab3Zvu53tAMrd/FIjS7zI:tUDWCq6fugETOR//nI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW PURCHASE ORDER FOR AUGUST 2021.exe

Files

2bc9a7200e3195ae8143aeda3c972eec
.gz
NEW PURCHASE ORDER FOR AUGUST 2021.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 864KB - Virtual size: 864KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ