BOSSARD_ORDER_4923521[.]zip | Triage

Sharing

General

Target

BOSSARD_ORDER_4923521.zip
Size

657KB
MD5

b3eb10d7a99084b39e0e1de2210adcb8
SHA1

2d2bc41cc7980f0dc4430f8353d310e5b32efcbb
SHA256

7ec499541fb4b5c295cb3c9796e6b00fecb2462daf773a8ae4745303ebb9135f
SHA512

b69cc345861278b567e27c8aa800c38eee436fd728cda3d9f952a38b1e8e96e6d4e84a9ebd239598f81ef34ab8b3f517502fbedb374db8f624687f0b8f0b5b41
SSDEEP

12288:yOl1e8B93VGKe3GhEcJLZ0+uECVcnYZzHm5fLVAymwIL7+dx2eVH:P1ekA3+IVcn2zGdJsHM2eVH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BOSSARD_ORDER_4923521.exe

Files

BOSSARD_ORDER_4923521.zip
.zip
BOSSARD_ORDER_4923521.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

oKHN.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ