40edbdd1d093e053a37168d5e6722eaaffdf6ac267900dbfece36344a9b1ab33[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40edbdd1d093e053a37168d5e6722eaaffdf6ac267900dbfece36344a9b1ab33.zip
Size

616KB
MD5

bd8e62f0df372e77732436033685a5e2
SHA1

a375ec4319f88a28a5609454f5c72535b5a2ed05
SHA256

40edbdd1d093e053a37168d5e6722eaaffdf6ac267900dbfece36344a9b1ab33
SHA512

99f61990c59dc49dd08f68141880649f3b4a804228b5d326ab29929b9adb72fadbd1ac2b813e64ddfa9c8598ada3ba74dcf38ecde1cb389b88886d1c0c6e40d7
SSDEEP

12288:gZrSt7CasfqrhLulv0VXHWHN2VX7Xbi/A35IvlQhp9G:gR/fq1Sl02t2VLbOA3ytuM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO NO. 156158.exe

Files

40edbdd1d093e053a37168d5e6722eaaffdf6ac267900dbfece36344a9b1ab33.zip
.zip
PO NO. 156158.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 641KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ