79cbd3a2b15e3cefe9c7300ac127f970eb639a4b7f22af359b42c6dd655d49c6[.]iso | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79cbd3a2b15e3cefe9c7300ac127f970eb639a4b7f22af359b42c6dd655d49c6.iso
Size

160KB
MD5

381809c834ab8b73e463bd0b04fd311f
SHA1

09a2b70476835f8d7e1e22d6d91a9f9b35ac4cde
SHA256

79cbd3a2b15e3cefe9c7300ac127f970eb639a4b7f22af359b42c6dd655d49c6
SHA512

d41e764592b43225aec15d0a0f1bca9505fba32940e6f115c7ab651542accad9e4d0bf62202f2379f3034d15287a1d0f2081997be81b3557264ff38b95603cb0
SSDEEP

1536:D80eucORyrkSP0FXKnMSdNAth2W5aJ/BzxHVv2IztF4IuDe8ir:D80soyhP0BWMcuU5BpVv2mtF4Ji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/INQUIRY_LIST_of_products_0716.pif

Files

79cbd3a2b15e3cefe9c7300ac127f970eb639a4b7f22af359b42c6dd655d49c6.iso
.iso
out.iso
.iso
INQUIRY_LIST_of_products_0716.pif
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ