DOCUMENT[.]zip | Triage

Sharing

General

Target

DOCUMENT.zip
Size

678KB
MD5

5a520788e100ed2feae3245959883499
SHA1

364341b98fa87867b8deba97a510f9334761f322
SHA256

f6181d41b293f3dfc259c2cbbc2ab57d074adbc141d0ff345a7230a5031a0928
SHA512

1f1ef3aff682b306b835ee8c824426fbec140f1e28ac73a32a7c20e11e50baed9ae5b8e1ea8a08e40a5b46569e45464ec2d4dca9b8c3ccffccf0b5bd985172f3
SSDEEP

12288:pwLLfKqi96GzxheyT3J/pR5WIgiz2c7Rb6Etji9iPa9qU2eZ6toVLMDQfRDQxoZo:ik6w0yVBRIIH0wioP73eltMiR0o+6g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DOCUMENT.exe

Files

DOCUMENT.zip
.zip
DOCUMENT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ