PURCHASEORDER-6350-2024[.]rar | Triage

Sharing

General

Target

PURCHASEORDER-6350-2024.rar
Size

547KB
MD5

6b3bbade5163e9b978f014f389df975d
SHA1

9e87f0d98ece69ce54bc93484046945df3bdbe7c
SHA256

3fb85f6a40dfc7b76b2e72ce78e391a31d0647a009c1fe0252e49c6940220943
SHA512

c854b08f97cb181ae2ee2425ed0245c5b701f7de547dce48a48e23dc8c5e8c3cbd8b358b5aca63dcafd4bd45093653736609d3065d3837fca2d194b648f72144
SSDEEP

12288:23MlIXJIo67VMLCzVaD0iCORwO1Xt/XKKD5BC337RC:2QcIVFzVaQixRwO1X8K1BCg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PURCHASE ORDER-6350-2024.exe

Files

PURCHASEORDER-6350-2024.rar
.rar
PURCHASE ORDER-6350-2024.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

NnLj.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 611KB - Virtual size: 611KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ