02082024_0147_01082024_Order Details[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02082024_0147_01082024_Order Details.zip
Size

298KB
MD5

24f7f782a8354114eacee6e2e320bcf1
SHA1

3064c74cd32ba9dc56ba5a742a297586dd25b1f8
SHA256

a94d439b16a4b927f83fa642571b7a9eac4228e8ed59d988f749186c743144a8
SHA512

cd73a325ec879eb7aa4489f2ce46d2cbdbb03da85e2b5f1cc2748710667d80d5a73ce5bf1d0ef58930cc71d68190d2acb983592692d70de3186fa24dbacb9b6f
SSDEEP

6144:8pFDrnSBq/13g89aKCndi2UmjeB63TuYEnsddhGBQLvEVPI1yy:8p9SAaKCndnxeayJBBEEVCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order Details.exe

Files

02082024_0147_01082024_Order Details.zip
.zip

Password: infected
Order Details.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ