09052024_1331_09052024_invoice & packing list[.]rar | Triage

Sharing

General

Target

09052024_1331_09052024_invoice & packing list.rar
Size

713KB
MD5

7f72b03c3f61a5ab742773243d638187
SHA1

a17261790661c6dc75f911fd06cd755fa605e7fa
SHA256

4ce2ab17fbe70823c298c90f3a3ec9831237634f4dd1f02882f3fd5260ebfc5c
SHA512

7ecde4d9818a0680072d53bf2e4824e7443f5ed81d3a386120709cff84f9cbef826a4ae98bdd3976530d77bcbc57f54ef4343e2a97ca791c3287749a03e875ae
SSDEEP

12288:iU7bCcN/LvLv9frpLa3K6TMoviETnS+oNTur2NlLrPkQub3s5U8TJBrmB7ZyuD9W:XqcN/LLVT9an9KEDO66LrP383smtB77o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/invoice & packing list.exe

Files

09052024_1331_09052024_invoice & packing list.rar
.rar

Password: infected
invoice & packing list.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ