29082024_1403_29082024_Ordino vaś o bikinipen_29092024_pdf[.]rar

General

Target

29082024_1403_29082024_Ordino vaś o bikinipen_29092024_pdf.rar
Size

8KB
MD5

5b551c63f9fc921cdbf231330396b73c
SHA1

1225faf162674df4a9d083e5bd1611b347ec78dd
SHA256

f0c5e2a59a25772b856405f265a8b7cb5cbcc6dcafa3e857ceb478ac75afffdc
SHA512

f88e5da589cbefc1a15121feac6e9f83a843d7e8396ecc651120d4ef7644231ec0d28621f3ca7bb96679927c54bc3cdf59a771456df9f9dcf319d92168cf03a5
SSDEEP

192:vRmuOLobBvkwTB+j/qvYaavXIOfqBb0lOetksuoFPvhoo:vRLAolvlT0bXIyqhOWszuo

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ordino vaś o bikinipen_29092024_pdf.exe

29082024_1403_29082024_Ordino vaś o bikinipen_29092024_pdf.rar
.rar

Password: infected
Ordino vaś o bikinipen_29092024_pdf.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ