Nowe zam�wienie[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nowe zam�wienie.zip
Size

7KB
MD5

4d268c0642686e9344c9761a77f21859
SHA1

dfc2546db3b7e4ede60f0d3d176e981ecb1a1286
SHA256

8b8b106d00671b48d72df517885e1c8444fc01d2072af30f304680e619c0a0dd
SHA512

afa35136ed912e900b026af5dd822f69b0d8a47285435c3056612efefe6fba91342b78bbc99508063e4c2f28d451cf150816cc1bacb646f105bfcdcafc8ef07e
SSDEEP

192:Uo23+gZje5lZa0qaZXmYBVc1yJ+U527Y+v+nfxtVdMq5/:Uo1gh2S0PZ0BU50Y+2nfxtVd55/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Nowe zamwienie.exe

Files

Nowe zam�wienie.zip
.zip

Password: 12345678
Nowe zamwienie.exe
.exe windows:4 windows x86 arch:x86

Password: 12345678

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\2023CryptsDone\hosh genetic\obj\Debug\Toslan.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ