fb48ed470290fa015fe877513b29a943702c68f643fba1cbbedcef8e78641d71 | Triage

Sharing

General

Target

fb48ed470290fa015fe877513b29a943702c68f643fba1cbbedcef8e78641d71
Size

743KB
MD5

dcfcca17090ea08fd08f3bcb0a357d68
SHA1

1bea69f0232ed8bb7bcb05d6912a734ea85c6b8b
SHA256

fb48ed470290fa015fe877513b29a943702c68f643fba1cbbedcef8e78641d71
SHA512

8af1cb202333c69ba9e98fe066ea38d79ff6fdfc5faac63bc572ef6d83c661c7898eb7c841994847458d89fefda458f0bc86ec3959f71902db84fd15119b23c6
SSDEEP

12288:lhWoOamSCXR4aF0o8fyOo3Y8v+c+0pLE4LkUo1OZz3LXZSAdRRsVDdslh+N7d4l9:pVfyOIYq+r8fqYZfZSyAslANJq/BR5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Fabrics Store Order 186543.exe

Files

fb48ed470290fa015fe877513b29a943702c68f643fba1cbbedcef8e78641d71
.zip
Fabrics Store Order 186543.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 870KB - Virtual size: 869KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ