uo4orj[.]7z | Triage

Sharing

General

Target

uo4orj.7z
Size

44KB
MD5

13cc0500b8314c8298c575dda0b3b9d2
SHA1

66d4407abe80a88cede902121f6dcb16d13eb605
SHA256

0599cff71aa2cd26c4dd7906a3e15ec340ebb52de0848e93c8f77ec9edea3e1e
SHA512

dede7343b1387e660216ed1e488fc576d2b0135f2ac4c0d076ab1f1db47f2a72f5913433f03d82ffebb9948f6a1d957375ad200398f2ee476232c91cf0948c3f
SSDEEP

768:qalF3feaWZWMDmkVS3jHMGPLIgv/s7U4OHUNuV+cKj/6rmssrSK:pPWHiI4jPPJ4cbRqZsA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Doc07133180pdf.exe

Files

uo4orj.7z
.7z
Doc07133180pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ