8c95c01d-5352-4109-a671-56cd98c7041e[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c95c01d-5352-4109-a671-56cd98c7041e.zip
Size

658KB
MD5

31cb34f55b4deabacbb2f58270a47e9b
SHA1

52894197a4777e3e9a3560f3effd063260454de4
SHA256

b35ab0b506a7d8eef0e0bab808581ef111060ad54cce4e00a9e04d7ab8d05466
SHA512

371f63a703e8989510f111617870c2d87a8c2580521c47cb7541b486353de619e3cc9ec26fd54b6b6af2207075881428c8d40e41117ef2d07e0389b2194d4bb7
SSDEEP

12288:HvRBqEmSAbCCIXyN1ultmGuxUMG6gojsmMdKBH93w+m1clXMddGeUQ:HvfqwAbVN1ytoU6gojLMmw+maXsdDr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/new order. PO68792 PDF.exe

Files

8c95c01d-5352-4109-a671-56cd98c7041e.zip
.zip
new order. PO68792 PDF.rar
.rar
new order. PO68792 PDF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 687KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ