Pastjums_P[.]O40562_SIA_BLIK-M_Doc[.]zip | Triage

Sharing

General

Target

Pastjums_P.O40562_SIA_BLIK-M_Doc.zip
Size

169KB
MD5

d449ba26eb15c71f6591bc2163dbff73
SHA1

2c04b65b3b5096c4cde0e7c1535e2359e5c5673e
SHA256

5095515c5cf5cf9508422ab85334e3c8ba5ec5130f9fb70e5bed2c1d07188b05
SHA512

10144dcb6cdaf7b074a18ea05fd817e074fe73e8994faac1a932e15eea0cb8cc4d3fc20f4edd92fde8f698f43ca2e247b5456b53e379ea528ece0a455531fd28
SSDEEP

3072:iLku3X5qjluUsM+cYbsRQf/ezTrGrw9IQSikIQXW7btXwvSJsRotUi:5gpIuUsMubsRQfsTC8Q27bWSJHUi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack002/Pasūtījums_(P.O40562)_ SIA_BLIK-M_Doc.exe

Files

Pastjums_P.O40562_SIA_BLIK-M_Doc.zip
.zip
Pasūtījums_(P.O40562)_ SIA_BLIK-M_Doc.iso
.iso
Pasūtījums_(P.O40562)_ SIA_BLIK-M_Doc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

OCT 31.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ