7dbf272ace08e743fc7c3ebaca67edcd8ef1cd4979a7e67ac8ec10e77329268f | Triage

Sharing

General

Target

7dbf272ace08e743fc7c3ebaca67edcd8ef1cd4979a7e67ac8ec10e77329268f
Size

814KB
MD5

0d331f38e38f409e80851c1db98dc5bb
SHA1

15cfc0e48124c0603fbd04b06268fbb3b3eff934
SHA256

7dbf272ace08e743fc7c3ebaca67edcd8ef1cd4979a7e67ac8ec10e77329268f
SHA512

05d83ea5e59ce072591ab036a9d6a6a0215e6c290f478fdfb3fdbc5ec44ac3aa265d4dda58722bee6db1ee3cc110359309423e444ea2dd41066b39be4ed176e8
SSDEEP

12288:zK3kLf6WCAEEtNTQ54zCw5vgihSPPMNYwq4Dna7qX+HqHkCQ/7LZJmIwtc:zj7t7t8W154iAPm9DaBKHkCQ/7LZJBYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/New order.exe

Files

7dbf272ace08e743fc7c3ebaca67edcd8ef1cd4979a7e67ac8ec10e77329268f
.zip
New order.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

TzAP.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 932KB - Virtual size: 931KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ