a630f7568a839582a7e38927a6e38f3906c69ac8e1ab17dcb325ea116d9cd68d | Triage

Sharing

General

Target

a630f7568a839582a7e38927a6e38f3906c69ac8e1ab17dcb325ea116d9cd68d
Size

138KB
MD5

61f007807e4657e4f988662e90033641
SHA1

e6ce33d8fcf83947ed8634e25e362fa188bf69ad
SHA256

a630f7568a839582a7e38927a6e38f3906c69ac8e1ab17dcb325ea116d9cd68d
SHA512

9b30e304d2943e8f00b271c28b7204413b4a6b68e8ad46a2183aa15149e17ac1cf8c9cb07ee46df956d73c29e84b5428c6426993fc060687df0ff3880a58215c
SSDEEP

3072:n/39T90lURYKpRU0EFM9DWVPXykeYE0chyla0lQmPqwXIOAXRw97m/WL4:nPt9eORgFaiV6lV0L//P4X6JWWM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack002/Pirkuma pasūtījumu_(PO227045)_Santehkomplekts.exe

Files

a630f7568a839582a7e38927a6e38f3906c69ac8e1ab17dcb325ea116d9cd68d
.zip
Pirkuma pasūtījumu_(PO227045)_Santehkomplekts.iso
.iso
Pirkuma pasūtījumu_(PO227045)_Santehkomplekts.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Nov11.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ