付款收据_PDF[.]zip | Triage

Sharing

General

Target

付款收据_PDF.zip
Size

21KB
MD5

175584aeb3adc40de9c7e9d40535cd9a
SHA1

e25ec2710ee98843891b5ca480e313412a749fd6
SHA256

81f96447b363e2eda47b195df8bb05c68ff378150b1aff80c22e555a3c5214fc
SHA512

516c21f36fc9ec0e7f1c0300e72e37c549ef0969401214f67c675e2153ab0b2f1b7a450f0db567af40bd96755684c37c5c665cf7298c7affc777fccd5fe84d3b
SSDEEP

384:F35ijZ3WE0KNmL4UjSB6lcLxQ3BiYPD7aCfiOqj0h:F3McPKgUUjcIcLxQxiYfHLqq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ndnownts.exe

Files

付款收据_PDF.zip
.zip
Ndnownts.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ