z1Ordendecompra10072OC9957pdf[.]exe | Triage

Sharing

General

Target

z1Ordendecompra10072OC9957pdf.exe
Size

642KB
MD5

98530c06c4cf0b8cf91fc7491ca9cd67
SHA1

0da058ce55b50735d3d4990b06ac57b02fc71aa0
SHA256

17b0a93d47762eaa5fa2f7e88cd664103cf7d106905d3d7a637a21b802481f13
SHA512

37ccdaa8b93d6d852a140dbcaf4df33bc4928c98ac80b757014c704f3de91689d54de8185c0465ed380fc11c7d48fb93b8fc7a2bab7b6bb7383c8cdc87a1c5a6
SSDEEP

12288:ArkhMOoltiJ/c7eqjJ5tdMFnJgMC9XUKeZ0SMGzkZVlLy/S2lLc26pf9gm:Arkh5oDiJ/cCqjHnLMckpEGzkZVN4c2N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
z1Ordendecompra10072OC9957pdf.exe

Files

z1Ordendecompra10072OC9957pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pSLj.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 639KB - Virtual size: 639KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ