Prima copia[.]docx[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Prima copia.docx.z
Size

1.0MB
MD5

26cdeca1d668aec1c56c5395630fdbae
SHA1

324599a0eb9f2a40999bbf5e61380e40a388df85
SHA256

0cb8b63f9d775f8d738877981acc6ce898ac615694956266b1d6cbd469923aca
SHA512

4a330de9d0b484fee5ad6501b3bedff27165bdfc4d2da4ea77b8fa5fd1cc58eb316d6dedd29f26c9107fc3c88e21b5e22dba82f5c5351ad2b37a2a91bb0aef5c
SSDEEP

24576:j8qcta4ligGknc7V8CSjSI4BkesrjqJR0v0IBWY5A5fp:j8qcta4lMCCSzQCqJEBWY5I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Prima copia.docx.exe

Files

Prima copia.docx.z
.rar
Prima copia.docx.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ