fbb13432b4fa58b7a9a24c29e0c4b296d5642450320401caf21fc1fc4f0c7b79_JC[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbb13432b4fa58b7a9a24c29e0c4b296d5642450320401caf21fc1fc4f0c7b79_JC.7z
Size

605KB
MD5

69ad3ea266f9cf8c73a0006d65eba105
SHA1

f84a9dc8fbd021dca2b386608621987338138164
SHA256

fbb13432b4fa58b7a9a24c29e0c4b296d5642450320401caf21fc1fc4f0c7b79
SHA512

f3eb2a98dd47038b48d5c1005ea6ef978c4967c3afd5566f64fd7c7b3b568c5d9f72d6ecda46c400a7dc0f1f4f4446a0da6c8b423dbe496430d687257aaa6fcd
SSDEEP

12288:bQ+BZqpmeR042KPAALKscShUssxw1YIKkqKzX3JPY2iuUVUdKIjvO74q:tqkmJAgKsMVxw1PKkxHvcUzvnq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CWXMF230300599.pdf.exe

Files

fbb13432b4fa58b7a9a24c29e0c4b296d5642450320401caf21fc1fc4f0c7b79_JC.7z
.7z
CWXMF230300599.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 614KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ