24102024_0538_24102024_нова поръчка pdf[.]zip | Triage

Sharing

General

Target

24102024_0538_24102024_нова поръчка pdf.zip
Size

592KB
MD5

a3029f0cb8d6757993d43f5b84ce6049
SHA1

ae1feb6430225d7a8c49e387042808d4a2ef98c5
SHA256

c9e266773311e6731f59e0b24b62a6398898bc98aa84fa84344bcfcf55856d23
SHA512

a4098e99b81b03fea3cb1025249369a93e64d8cb5b9c44932d4d53231fd87ca7a36bcb1c03ab689da9bb91385a32da0329955ded9523a056791516ebc70079a7
SSDEEP

12288:83UC1caqR/m3YjiNo1uOAY5WXvNKmMrspGzDY8T7QgZv5S2R6ZpQQYSW:dyc1R/m3Yac3AY5y0brspGX9UgVEC6Zi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/нова поръчка pdf.exe

Files

24102024_0538_24102024_нова поръчка pdf.zip
.zip

Password: infected
нова поръчка pdf.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 608KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ