06062024_1713_06062024_Sales Contract[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06062024_1713_06062024_Sales Contract.zip
Size

691KB
MD5

1100dd5b1ced1de9f237ab08f7c51aae
SHA1

0cd2ed0be0cd35b0a0256aa07a1e57ba41bcb0bf
SHA256

d5fc8d0d97abcd605f2829d0d6b1da7e2bb4bedea124c51ed0b8e85182e5d69d
SHA512

638058e1a1a955067c3c90ee1e67dc155db990b33171d32eeec98a11167c0d42f33abe5c7cb3517910a5a857571a3717b22cf3129f0712818a576fe9dcedefff
SSDEEP

12288:6TlbzRqldmxmT707LuXSj69tbxfDD+s8rIfF4NJTfrzFC6YJm30vzUnCp3LJA5La:6pzRqldmxwXSsbZ+s8e2ZCDm30rU+JWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Sales Contract.exe

Files

06062024_1713_06062024_Sales Contract.zip
.zip

Password: infected
Sales Contract.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ