5417401ef619f9b1c7c61dddb48baa6265360f4a823ca2c2c193001ceb27f398 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5417401ef619f9b1c7c61dddb48baa6265360f4a823ca2c2c193001ceb27f398
Size

666KB
MD5

606be172e3f109a4cebcfd69fd41bdfa
SHA1

e27f9851a64b8a3a0e2700d4f435dbe4ce2a9e51
SHA256

5417401ef619f9b1c7c61dddb48baa6265360f4a823ca2c2c193001ceb27f398
SHA512

a70c777555b4d5e5cf985830d9fc13d208041af2cc0385b14b22d54f7e11519275b8eb36ea38f81d3e74807a4fbdcbbbc94f8f005c7d6196c90a928161726d4d
SSDEEP

12288:TWRcigz9Qd00gYNkmMMbW6miDx1dGxKwpixMyQMRDEiyZa7kgJtFducX:a6PQdDzW0xAK62TYYkgD3ucX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Inquiry.pif

Files

5417401ef619f9b1c7c61dddb48baa6265360f4a823ca2c2c193001ceb27f398
.zip
Purchase Inquiry.pif
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Jhlb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ