0be9cb7619071d30f2ce6b5a4dc2b2db | Triage

Sharing

General

Target

0be9cb7619071d30f2ce6b5a4dc2b2db
Size

28KB
MD5

0be9cb7619071d30f2ce6b5a4dc2b2db
SHA1

1b7e6bd594fa91d537485f420b77b4b61bea5f47
SHA256

3f1c85ac20c5b5a49d5fcac94645010b2a0af858e271fbe2f26365058e690cd5
SHA512

99962a79f4156bd39684bfed6b61d67ce1e184f1e178fb019f1d9eafbf61601dd06aabb4fe0bc8114cc840502002039af4c06a4dccc5f6d49c8f5b241ae2af2d
SSDEEP

768:Zt97Voe+OqA5Zgu3Fx7UCzI1GbA9F2wTu323Xo:H99jNL7jzIkbyM2uw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/document.pif

Files

0be9cb7619071d30f2ce6b5a4dc2b2db
.zip
document.pif
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE