Purchase Order 77809 for acknowledgment[.]zip | Triage

Sharing

General

Target

Purchase Order 77809 for acknowledgment.zip
Size

653KB
MD5

3b166faf5a15f1279eb2671a0432ad2b
SHA1

8610083042201b17b9bb76a9746e4308839b7d50
SHA256

8db3ddff6b96d9b8f78b729a456eb1273805b2b03561bff8b7652b5ac073e2e8
SHA512

17abccb238f10164a68bf8a074146d417284c3b0bb939e337f4c923d91bedd59ea9a248ee65ace8bffe82dadbf8e2fcdf7059360f77b5c6021d53f7c98a3a3d5
SSDEEP

12288:FGqB+Egzud0UJwCQiffPc+f+gNanLWPGUtLamQaGh6ax8HEuDk2vFp:FGqNrd0UKCQiffLf+gNanLMGu3ax8Hxz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order 77809 for acknowledgment.exe

Files

Purchase Order 77809 for acknowledgment.zip
.zip
Purchase Order 77809 for acknowledgment.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 721KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ