Bestellung 0030520574[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bestellung 0030520574.exe
Size

735KB
MD5

0df48abd5460019ce957fcfd08dc4f1f
SHA1

a8f90879c4b3ebc3c83e6b76ed8e2b53d11ab100
SHA256

ab92bcdeac6ebabe41a3e5114379fe8ba179f665ed9811fac701c29c74b37bbc
SHA512

8e22812dae3196f1f5fa133e738bb7c4de39accb35be5e482e2207c4aa3b17c477400857c404366f1deeb043fb32e78753fdaea10fc7193d6283fbec02e3812b
SSDEEP

12288:YnMC2Nf0xC0eQmfoM3gAeSxppCfxxlYaSckHtGxdIkbxGWr9kR2K:YMC2NfECrDJgBgpCfxx4dGDIkYWr8p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bestellung 0030520574.exe

Files

Bestellung 0030520574.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

NEJi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 732KB - Virtual size: 732KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ