PRE ALERT DOCUMENTS[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PRE ALERT DOCUMENTS.zip
Size

405KB
MD5

295363767db1d699dc7212f3fceb3031
SHA1

6ee61a550cd5b6cc4655a6f35b4735523c4a5dd8
SHA256

4138eea760aabe4ca16a933974783e4b7ab96cdf33a7ba41b792fdfdb40d0c6f
SHA512

cbe62d5d98123decf362485efa3293822a986debac4d44e9b7701e947f24f8eff0e5d2f53efd94ca92603a90765418e68829f63941bec9dbf3c2be28d15f9e27
SSDEEP

6144:1RbrvrzwekhVKnMn/62dSPJiVDheMOZvNamRy5kQOKd9wNzyMYWy1ZQQ2zyie:1xrH/k3KM/XdSREHqjg+eqVnz9e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PRE ALERT DOCUMENTS.exe

Files

PRE ALERT DOCUMENTS.zip
.zip
PRE ALERT DOCUMENTS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 656KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ