7d0f1be16b32d2ba79c7c195bc734d109c373f5c30eeb504a467f1b18699367d | Triage

Sharing

General

Target

7d0f1be16b32d2ba79c7c195bc734d109c373f5c30eeb504a467f1b18699367d
Size

138KB
MD5

3718ac84d9400c3efbe7ddeb8f436fa0
SHA1

00ec1cdc85d6dd1321138318a76cea3b5924978d
SHA256

7d0f1be16b32d2ba79c7c195bc734d109c373f5c30eeb504a467f1b18699367d
SHA512

ec2e35ec676860c6546c7d648d5dfd06064ecfa986d18db2572c948375c8301f993e5e8fe94bf41adc156af1509214882e2742c73811cfaebef00a53f67178eb
SSDEEP

3072:AQq0D+tJWaDiBdSzj8FM9DQVPXKkeY+0chel+0lQmPIwXI6AXRw90U7zEW:laDMdSH8FasVSlj03b/PWX6uczt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack002/Pirkimo užsakymas_(PO427015)_ LITELEKTRO.exe

Files

7d0f1be16b32d2ba79c7c195bc734d109c373f5c30eeb504a467f1b18699367d
.zip
Pirkimo užsakymas_(PO427015)_ LITELEKTRO.iso
.iso
Pirkimo užsakymas_(PO427015)_ LITELEKTRO.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Nov11.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ