cb12df7df3a989ec20e09dac707514aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb12df7df3a989ec20e09dac707514aa
Size

542KB
MD5

cb12df7df3a989ec20e09dac707514aa
SHA1

4368195a8538eb0e9d9e9c8f2d3dfc735e22b102
SHA256

373a53b647ab5622a66a237038ee06ed43018b970458c0af3589a7c0ce7e8247
SHA512

83ebab5a81c90531ba242ad3b93f9251eb13d81d544d7ea59d4c5ec2bbf4bc687131647bb9122cd57023e91e04ea93f059340a9a363521036fce4ced3848d7f3
SSDEEP

12288:Dr2VDr8u8uqDADwrpgyfVItZhi1KtuGJLyRuQPnhkfeZgf+W:6R8uqDASPkbltuGezhS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order_01792PDF.exe

Files

cb12df7df3a989ec20e09dac707514aa
.zip
Order_01792PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 966KB - Virtual size: 966KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ