Automate Purchase orders88777[.]scr[.]exe | Triage

Sharing

General

Target

Automate Purchase orders88777.scr.exe
Size

789KB
MD5

a426bc26980e0b4d8d8011053dd70487
SHA1

5723196f52f4c4d1840a442cfef4a1bd66b629e6
SHA256

f7d2f864f121f8a86c7bd403bd70d9f40bb0420415b542b45110a2d4b7daee13
SHA512

c2f078c94d213e95e47a0d6c483ec1c828cbced1a131992a974173ee2f270c6d93e89acb33856152751a0c3fb4d40c1f068c983fc7cf1d5f6e3da0c61de780cf
SSDEEP

24576:9BxC3c6baDp7xmOefWDNvZyrbfEZSJSugtY+VT:9DGO7xmOxIrbfMPugtY+VT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Automate Purchase orders88777.scr.exe

Files

Automate Purchase orders88777.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 781KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ