Popis novih narudzbi je u prilogu[.]zip | Triage

Sharing

General

Target

Popis novih narudzbi je u prilogu.zip
Size

621KB
MD5

9e4ad176880cefde747a170359946fb8
SHA1

81de0e67fe83795865675a9a29f1658e0cfdfe5b
SHA256

e7372fff44d20f93a9aaffc083d0943c1be8b1c4b0acc123b77742379c6fd2cd
SHA512

df13be50229a3fdc71421a5dab0068b5b6c476deb84d871d13aa8b2dda13e127e256a30c1a79ea8907b07dffb979ef17f8f6b8c7fcd6b09572a750e34e10cb2f
SSDEEP

12288:PLOC1b7TE0r8sH39lPNuRjVSS5X8eT7sLB81BHM/all/GUX80T8yDPu/hYy:yGb7d7l8Rjj18eTeByBnZLXdjS/R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Popis novih narudzbi je u prilogu.exe

Files

Popis novih narudzbi je u prilogu.zip
.zip
Popis novih narudzbi je u prilogu.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mxDW.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 704KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ