e5fe2a440c03b68609be9d951fa20eb4d452ce31ba9aa89d8244a5c0d4c24606 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e5fe2a440c03b68609be9d951fa20eb4d452ce31ba9aa89d8244a5c0d4c24606
Size

714KB
MD5

c25753d9ed52af68706d7f8c3cfd1af7
SHA1

0a6df78a260c8f35f3ff44d8d276169955dc87db
SHA256

e5fe2a440c03b68609be9d951fa20eb4d452ce31ba9aa89d8244a5c0d4c24606
SHA512

6d4cbf8b2813514c82ec8960d4d9fd7c529168cd1f554562155208c56cf10829b706786e861db1f57500ace1cb4fa7c1532927310ed639292659ed71891847ca
SSDEEP

12288:AIOQ9autB7J5H9jFyMqCayKAXYGB7+8hABM1GueVIqkdIwz1deg+vATJ:WZutNJ5JqCL7N+8J1JqK/zXdaAN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PURCHASE ORDER.exe

Files

e5fe2a440c03b68609be9d951fa20eb4d452ce31ba9aa89d8244a5c0d4c24606
.zip
PURCHASE ORDER.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hjbU.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 771KB - Virtual size: 771KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ