6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c.zip
Size

631KB
MD5

e84fcf08ded1588ad1b236274c7afe5f
SHA1

fcbed67f2d859c663da27a663c54f663e40548f5
SHA256

6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c
SHA512

b94d81e325a03037ab6894673de351aafb8bb0d57f8e5586a219ced4ae827688c29aed537735920950e8f0c30cd22416ecbf1fbae830f8dc20ce06da92b7664d
SSDEEP

12288:nG1r35IIGEYObAJlx13ycOjDvSnfIj3L9ewpf4ekefLOWLEF6wtkGIjbi+xwBq:nK35DG/OC3yNHKfIjtgzQBEXt3kyBq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO 23897 Order Request.exe

Files

6d23bbb99a8ba82cee73b0c873d3ef5d00ad7481896a7dc351402f1d9720a41c.zip
.zip
PO 23897 Order Request.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

YmDL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 676KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ