New Office Address[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Office Address.img
Size

1.2MB
MD5

8e3a39f9dbdbc9515850756a6ccd3295
SHA1

90457e2ce8c60b66d646d3866af3bf5bc18e86f0
SHA256

0461d361012179b4ea0e520718e3c18613398d440f73f0d555a92b1e98bb6df7
SHA512

9207b335e46f22dbb172b4c28c40b34a62ffae08109b641391393c3b5bd61efe472d875d66c7b6929f696b4f4d5cd1cd09dc32f16b10f5abd975e8f49d1b5cfe
SSDEEP

12288:DmL87+24UJeNdz2d6BNvurMkCp5bUoYQe9YX0/Gjb+99u7fL8:Sg7+2deHKdTw5bzYlKE+8cfg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/72RSDOCK.EXE

Files

New Office Address.img
.iso
72RSDOCK.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ