25062024_1641_25062024_Urgent Order Quotation_PDF[.]rar | Triage

Sharing

General

Target

25062024_1641_25062024_Urgent Order Quotation_PDF.rar
Size

625KB
MD5

db1a7f792b270f5582214fec683d0d8f
SHA1

e22683f2685b2cb039eb3aa8ce36fba6388c31d4
SHA256

07e783f93cb4f77e53bf07300e46e2fd096641d609d23f13b6903c87ff20dd66
SHA512

b97579db0c85d6f66133d9217f6469ba4c944cc803c8ccb2db42f80a66d0858e2d876ffc646a7429654faedf14a639e0cc836da98410d2780842d6f7a8a5bfe9
SSDEEP

12288:I/Zc+YKQk2Kct/6U/xDe8EoA6Qp552irfEAjAyNUx5/5p:I/JPctSUJDR86AjfNUxln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Urgent Quotation Notification_PDF/6N0eSKFgiTb66IA.exe

Files

25062024_1641_25062024_Urgent Order Quotation_PDF.rar
.rar

Password: infected
Urgent Quotation Notification_PDF/6N0eSKFgiTb66IA.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

sKJv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 653KB - Virtual size: 653KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ