CONTRACT DETAILS-73649000000000000000[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CONTRACT DETAILS-73649000000000000000.rar
Size

737KB
MD5

cc9cf45562ca2327e87906303652e07d
SHA1

fdc44068946a0ff2359a27790c48d3077318e002
SHA256

913ea9cb58ccec35d15845c80b4885954f0ab1f5d69d8f39cf18586d7f328997
SHA512

39f8aae36e3b70aaa17ccae1a3b8749557d8b581accfbc91ba885929cbf5b41cce9161d227f874685ef7e4f3e7004b914d77e42786c570e85690e15c43e58678
SSDEEP

12288:Iawa6aTskOMFKZHXCRHiMEB9pDz7xZUcQeIXZu/rwqsY+lQggcS8WaXre5:IRa6aYzMdRHXgpD3xZUbejrwq0y8WS6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CONTRACT DETAILS-73649000000000000000.exe

Files

CONTRACT DETAILS-73649000000000000000.rar
.rar
CONTRACT DETAILS-73649000000000000000.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

PZhi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 771KB - Virtual size: 770KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ