9ae806be02a905fa961f1ebe6a957ecbdd17ce68b5056d5ce2d006afb51b5ff7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ae806be02a905fa961f1ebe6a957ecbdd17ce68b5056d5ce2d006afb51b5ff7
Size

673KB
MD5

e8d853c8781347ee6599441e65ac8792
SHA1

e91fdd0b9e4f0971ba2843cf23e08ab13e2ab679
SHA256

9ae806be02a905fa961f1ebe6a957ecbdd17ce68b5056d5ce2d006afb51b5ff7
SHA512

54fe4576474b5fcf2280c9d9b55f2dd0f54ace1e59a074b1eb04f2b5910d55914a92751769a4fd6e31402ab34d40ebf5d779e9af3f9ce39dc6b8c80f0498f218
SSDEEP

12288:DASNZF1K20/rBfo2rDFCOW8/46sL76f+eMzjyrJN8eJKnrxmqXToF1YllszlJCKR:X6h/QpV6+eMzjSJWeJAmqkF1GlszlJC8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PURCHASE ORDER.exe

Files

9ae806be02a905fa961f1ebe6a957ecbdd17ce68b5056d5ce2d006afb51b5ff7
.zip
PURCHASE ORDER.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

GNKY.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ