Purchases Order PO72100020[.]pdf[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Purchases Order PO72100020.pdf.z
Size

630KB
MD5

556ab5cccfec27276c2b6f691cbbe7b5
SHA1

982a6cdf6d653ef42291184406836cdb6bb00bce
SHA256

7bbb221a18603bc031f699b9f08a25b3275f728645c773cb0e6ce90f76df921c
SHA512

2946010504650b200614f10c1f3cac315b7c7c5b2e6c3b1d7c435c63ffee1996df83a3527fca943b27b9cd58d7c221ffc77608abc642b0b9feb37644767a7d0f
SSDEEP

12288:xW0SQvtrOHOP0CTvU8Vb/d7UGZhSiqPbvR1FZJt8/3QCxc7DJUmNNnXZ:gOlrOH68Uzd5yHgxcZUmrXZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchases Order PO72100020.exe

Files

Purchases Order PO72100020.pdf.z
.rar
Purchases Order PO72100020.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 672KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ