AO XIANG FZCO Order[.]zip | Triage

Sharing

General

Target

AO XIANG FZCO Order.zip
Size

465KB
MD5

459cd973813b0490854ec87d19076549
SHA1

ecf1b3824021b21735ef0d5476cafe17f9c83112
SHA256

afca7cc06c7a29bd03d1eef16dfa92d07c6ff8ea6dc94486df9fdca99e6539aa
SHA512

0c22207dfb7d1d92e234dcae532f8b107f7693343dc7c22447ac37d2388b4617ee8a399a0d8e0bc0c888c0ba964a1405c285e75e9eafea22b61b4fb41111c0f2
SSDEEP

12288:racxJgEkpgTwBdAYJPrWYBg6U8+vR2xbbfCK15Ckc2:ram6TOTuZjW+o8+vcXh15XB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AO XIANG FZCO Order.exe

Files

AO XIANG FZCO Order.zip
.zip
AO XIANG FZCO Order.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 822KB - Virtual size: 821KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ