Document[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Document.rar
Size

600KB
MD5

cadaa81c52c5279f48e86d8037cc1784
SHA1

1e91112920dec8d70b1e344eaaec32968937cec0
SHA256

cc9ceb589bbbf22fee3f7456b0269d06773a6e96974aa20936868bcbbce88ba6
SHA512

4c71dc0ec4df8803a9c93130a990c896717eae8effb067790a04c28c2ddc3c8e915191eb6297f744f620c18dab8d043014fe7b752b822fdec15584fac5fb49ec
SSDEEP

12288:5s4DfDMA3wTyhaEfN0Q/p8aOg+ZOWlQWDSXSajIAZOi8:5fATyhX10+uaOgMOWCWeXSMK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Document.exe

Files

Document.rar
.rar
Document.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 651KB - Virtual size: 650KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ