b4423e369c143291d5b6eb8fb130472dd2639cae0eb0076a6105272a3e67763c[.]zip | Triage

Sharing

General

Target

b4423e369c143291d5b6eb8fb130472dd2639cae0eb0076a6105272a3e67763c.zip
Size

668KB
MD5

a107e8115381b9477a0ff5c188a9bb98
SHA1

48e73bd295716a2d709c64f908505e5260b50807
SHA256

b4423e369c143291d5b6eb8fb130472dd2639cae0eb0076a6105272a3e67763c
SHA512

19c673feb18532bf3ad5766abedcec4721196370911232a30812de8a5cdacea93e35a383a1a94e634f8b7f937e681c67c054822cb51d2813872ec660a39bb452
SSDEEP

12288:WUldIJwylzBD9PtPV265p2Ax4diGd7xIvi3dZLelU5i2KMmHfA0wM5Xte:ddi3N3726Ksoie7xlZLQX2sHVXte

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RECEIPT ATTACHMENT.exe

Files

b4423e369c143291d5b6eb8fb130472dd2639cae0eb0076a6105272a3e67763c.zip
.zip
RECEIPT ATTACHMENT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FPfm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 909KB - Virtual size: 908KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ