U prilogu lista novih narudzbi_1[.]zip | Triage

Sharing

General

Target

U prilogu lista novih narudzbi_1.zip
Size

637KB
MD5

ac7ac69bd1d3e6bffb64366ea1eb5454
SHA1

69ded6ad90c35e746314f2c239b945df77e0f7e5
SHA256

1b32cbb7f53c3eecc9c6a1e1824fbac816c58a940f414c6f613e2fc0d893c691
SHA512

944d95c4670a8f1e46d30a7f39eb28238c15aaca993fe59616abaef9994912f99fdf902edd5120586e877b3a1b59f544cc0c73d8b36c2b6314c294b86cda3114
SSDEEP

12288:4SwxD0VNoN94RrFuJSr1os0wbKYX7Pt/8R4JHqgT6Q4iAPKH535MZzRS9LPLE:4SwxDcc4RrFuJSr1b/bKYrt/8R4JHqgA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/U prilogu lista novih narudzbi.exe

Files

U prilogu lista novih narudzbi_1.zip
.zip
U prilogu lista novih narudzbi.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 774KB - Virtual size: 774KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ