3aa56b253d076233b5b94c64604ebc3f5d0dffabe9939256b76cc955d24539e1 | Triage

Sharing

General

Target

3aa56b253d076233b5b94c64604ebc3f5d0dffabe9939256b76cc955d24539e1
Size

145KB
MD5

a68d8f380d9d41f5fc86cd40f27409d1
SHA1

64b9a66cd4bf15805dbde525033b857c63a3b6de
SHA256

3aa56b253d076233b5b94c64604ebc3f5d0dffabe9939256b76cc955d24539e1
SHA512

e36e3b3ef3091b32d5ae82f500d624baf3451a94b07f289d5e7439c39374a9dcd57bcc4105f6f439e14cf0a11e16e5c8583555fb2ca61e00493d31806c8529d1
SSDEEP

3072:gljkfO/seBaEIHdEXE0Xm2QHMrrcu71ltds1p5UzzViBy:kjkfO/rcoH22+MrYu79ds8cy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Pirkimo užsakymas__(PO40891)_UAB-Vilkritis_scan02.exe

Files

3aa56b253d076233b5b94c64604ebc3f5d0dffabe9939256b76cc955d24539e1
.zip
Pirkimo užsakymas__(PO40891)_UAB-Vilkritis_scan02.iso
.iso
Pirkimo užsakymas__(PO40891)_UAB-Vilkritis_scan02.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Feb3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ