AWB#ORDER-544-0710_10[.]zip | Triage

Sharing

General

Target

AWB#ORDER-544-0710_10.zip
Size

558KB
MD5

fc9a640ba2e8dca39e82b6c7f2ec8e42
SHA1

d1b9c629b0cc405f88f3d1456c7c312301667799
SHA256

ac8ed2b8ec86d17b1aa2ba9265e2895a4e824b36c5768baea8ada3df412af76e
SHA512

b3199da0cb727277c564ad46e97133685c32416854a4016be076aa334d8d5b0724aebba0223e804ac08012610573388a162234b89709fa7e1d94010cb181c514
SSDEEP

6144:xvdYM2PHhPsEQAW5ws+IQyn58xC2qokKhvrAVEA8OmfYrS8rBR2pp3ZV2MY02F:xvR2P54SsnQy+E2gKVrAVwgrhqE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AWB#ORDER-544-0710.exe

Files

AWB#ORDER-544-0710_10.zip
.zip
AWB#ORDER-544-0710.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DULn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ