Document_Estimate IMP1573[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Document_Estimate IMP1573.zip
Size

828KB
MD5

13cff96b30141a260f23c3e933741252
SHA1

59e53a0ac4f3d023d9e69dfeaf2b92e332a12ba3
SHA256

59469d68ef1ca411d18f4f1b4719faf5ee69129569d71929050a147b9f67bb0a
SHA512

d40848b0faf2479d2d6e3a00e55818e0a20545306b99ff3081a121bf4b8b637a019a9d05df1b96bd8b0066062a45fe7eef4bbc9ae83d584262fb0413f295a48a
SSDEEP

24576:CO/3J2Y3dPGCaPg9i3HZb7KZbQlBMfP87NK/kVpyuFll3:/3JtdeCa49i3HZbQyW8hK/kV9vl3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Document_Estimate IMP1573.exe

Files

Document_Estimate IMP1573.zip
.zip
Document_Estimate IMP1573.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

UuZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 884KB - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ