doc2023054900020000091[.]cab | Triage

Sharing

General

Target

doc2023054900020000091.cab
Size

605KB
MD5

3319b2905dc2024e429e1eae0314eb1c
SHA1

829401a6d4061bd41dc07a56005f80a05c46a732
SHA256

8d5245341d4fa1ea648894837e573e3fd0cef8ce5de9f38f49abdd4af7a8fe49
SHA512

a147b4e6a7eaff312a2d59fd65ce77d839d024de0514df3bd602222c7722c48f0e39f2385731f3287d4a8171c4cfade803872451e138b61fa67c3dcaa1c80ebc
SSDEEP

12288:kBohxt6Pn0FjVVGAV4R9JHKiKfUTSjn6hGBhDhN1Yx6ZYCXUGV:kqjt6P0F/3wJxKfh6hY9YGHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Rp99i7Qt50UBq5J.exe

Files

doc2023054900020000091.cab
.cab
Rp99i7Qt50UBq5J.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ