041a77846ceab7fa287befd12a8481e6e128425aab5256ddb069e09601f80e32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

041a77846ceab7fa287befd12a8481e6e128425aab5256ddb069e09601f80e32
Size

1.8MB
MD5

d69905e9170677c11cd58ba8003388f2
SHA1

8648a818b99fc4696e00c8bdbde9138adc4c972f
SHA256

041a77846ceab7fa287befd12a8481e6e128425aab5256ddb069e09601f80e32
SHA512

d70316dc518c515be6a1071851da5fffe44d4b300dd8c7a80b984ae2730c69ddc932847e6a84e3186cbf106fc8a3116dc1d3d1b1c84bbd5f0ae98a331f0342ac
SSDEEP

49152:x9V6HwpvomshWn9l2sh/hn0PE5PHHLzRtKEDl2:x9mw0AnraCPHHXRtbx2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PROFORMA TEKLIF HK..exe

Files

041a77846ceab7fa287befd12a8481e6e128425aab5256ddb069e09601f80e32
.zip
PROFORMA TEKLIF HK..exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ