200317f0d6795a8f369e3de054f9e170839becacb101a3e686a21fdda9b1fcae[.]ace | Triage

Sharing

Copy URL Twitter E-mail

General

Target

200317f0d6795a8f369e3de054f9e170839becacb101a3e686a21fdda9b1fcae.ace
Size

575KB
MD5

957b3d928cd33706fcd3851a29a16789
SHA1

45ab21c994a8a6443464044bad38bb6bac6dc0fe
SHA256

200317f0d6795a8f369e3de054f9e170839becacb101a3e686a21fdda9b1fcae
SHA512

8f4beb55ffdbf510b75d18ccd6691b5f6c221a14e1284eb6666e636661a2661257360f30b2468b13297ce6868d4f8c57ebef75bf907bc452e5df01fb65b4dabc
SSDEEP

12288:podqGCVWqnziX7gWfrsyfbrlTXoyBYOrja2EcRRUBJr1:CdsReMWfv6CHa2LDAJr1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NEW ORDER QUOTATION REQUEST.exe

Files

200317f0d6795a8f369e3de054f9e170839becacb101a3e686a21fdda9b1fcae.ace
.rar
NEW ORDER QUOTATION REQUEST.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\CoffeeToYaraAndJoeSandbox\obj\Release\CoffeeToYaraAndJoeSandbox.pdb

Sections

.text
Size: 633KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ