Order MT731[.]zip | Triage

Sharing

General

Target

Order MT731.zip
Size

623KB
MD5

a1184d16c7144e97728872e1d9e94dcf
SHA1

04280ac473c752ae9ce80b7bcf15910e2699e55c
SHA256

af513d29b85d31f14ab178086a4ee93d6378965aa79353d81ad961009839846f
SHA512

6a499f244df82e7393d244dffbe987770da539c4d9c47415fa5d4510e84550a9e8c7000ed5f790d6e502dcaca1b0499f4dae70e386dbcb6d02cdc0f5b2ff221d
SSDEEP

12288:JnoAJl4Q6jhKLjruArp8QB4Q5Uq5/iOW3TPLuIgdslpG:1kNjhK/ruArp8ydPEXdgd08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Order MT731.exe

Files

Order MT731.zip
.zip
Order MT731.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

JxLY.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ