ISF document[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ISF document.zip
Size

512KB
MD5

da455eb6f2711969d68bdd0788bf8299
SHA1

dd7b009d32b46cca32200ff0bbb5b94aeb1545f7
SHA256

0db2b503e3b5ed1be8cab45f9ee3174806aebc79d2d28e1823a42fdb2a9cdce5
SHA512

cc5c5f8851cd0d9cc6e0c68ce6c91c571670e1f718df28cdd193bed3f4766f16371048fce55bf2d18cfd1c58da9f8dd86c759cb54a341a928acfa04b86e8c5a7
SSDEEP

12288:ApOxz66may33v8VJQWZAkb8rqaojXRNtPr3lVfQePSb:KOxW6Ty33v8VJQWiU8rq/jXR7/O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ISF document.exe

Files

ISF document.zip
.zip
ISF document.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ