58dfedfd07f483038b5a9ec74ca4d520 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58dfedfd07f483038b5a9ec74ca4d520
Size

632KB
MD5

58dfedfd07f483038b5a9ec74ca4d520
SHA1

d134fea4210a897d050884da1477ccc5aefff456
SHA256

1252ece51a29bff6dcfb78a28d430228b3083b529e2212e17482577e49bba034
SHA512

0fca6f1850e59ccf7d5df32c05381682b6ef21bdd9aa95c00e1be61394f4e472d2d32c304679cdf84d1c482a7b580c45f0c0ed227f5e22ed3f20481e2f79f5ef
SSDEEP

12288:/kWxIZSZXc6toMbvk9u4vhyk+h24L0oT2fkLEdHWAI+Muz2P:9ASZ5Y9ueHK26ioFArze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase order 4500640396.exe

Files

58dfedfd07f483038b5a9ec74ca4d520
.rar
Purchase order 4500640396.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ