RFx_ExxonMobil-Documents[.]xz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFx_ExxonMobil-Documents.xz
Size

601KB
MD5

14bdca06382dd5686ceb348eebb5314f
SHA1

bcd2ee2bf481ccd76f1f267fe212539b8b3b6b82
SHA256

0df9fbece46ec35752c0f5dda0571b4e5909e0fba8e37e3590006e2d2d476339
SHA512

cf50e01ef02e6096e94e3d025cb883dc984e30b5bb2e055aede90b204b6c9fb51739cc883cd87b26b6fc0570a148d1827c18cb07bee8e08bb12917aab6aa4a38
SSDEEP

12288:jdqsH6AO527ukc3Hgp5rnzgtKJL6w5CrhymKEGwn7Bzy+cBL3JAy:AsH6AO527i3w18CzV3sM3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RFx_ExxonMobil-Documents.exe

Files

RFx_ExxonMobil-Documents.xz
.rar
RFx_ExxonMobil-Documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ