RFx_ExxonMobil-Documents[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RFx_ExxonMobil-Documents.exe
Size

662KB
MD5

1782b7236df84ce58befb6e29c2ddecb
SHA1

fe583fc137f63be313d85692efad3675ca873f1b
SHA256

d6325d4aa8bc6a935f0d1b136a1e791c554cb78ffc23823e9601031e6a677c3d
SHA512

c65775e5e71704f2fb03f4a4032a3f6aa305dcd31627ca9868c698e2298bd7263f383f5a3c25cda78cd174fd26d4be7e36aa3dd8c4a0cbb8f1747428492b347b
SSDEEP

12288:fqPYPfY7JLlD7MtOwndshtpNt/azlbud4B3v3tjWh/N/v2H:SPYPgbD7MtTdsPpj/sbud8t6zv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RFx_ExxonMobil-Documents.exe

Files

RFx_ExxonMobil-Documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ