DOCUMENT-34789208[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DOCUMENT-34789208.zip
Size

717KB
MD5

350bbcbb253f740f1d83d4d77e35be91
SHA1

5633d352d015f41b6c74e6d63050c463aedc4e59
SHA256

ccb72e19b00ec30028d6c2784e65f439dad5805e673fcc34ad1e12eba0ffd1fd
SHA512

0b7047433e2e64a45a51f2c4f5f5bc87571cf55788e8e92398e6140089f8c8b16641161006ff6b669787c8b1d0145e031385321bd0e73cd7a88439ed85111897
SSDEEP

12288:0NCK/+UYT1X8wA2VyX1V6KDXy+s+cpy0oX6EZR79QiEbRSRIMRDM9:I1+UYBjnVG1XyI0676isRSRIMR+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DOCUMENT-34789208.exe

Files

DOCUMENT-34789208.zip
.zip
DOCUMENT-34789208.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ