nDOC180224-021-AWB[.]scr[.]xz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nDOC180224-021-AWB.scr.xz
Size

672KB
MD5

28b46dd3b6f3802771ca11a098fea291
SHA1

0102f37ec270698b37fb2b112effdfa4568da8e2
SHA256

549f64c328d7aafa6bc1e7ff8341af506c428923b17058e2f4c97811ce89ec5b
SHA512

6c988a188948c706fab77ba3d10d78c25acfbfc5c8598fb2b2692fb2acbc41e5a650ec1ad041d76a63f374debd72bf2d2a93e5ac8feb635a15c8b92ae46d9653
SSDEEP

12288:x364ElXrIIvxEw5vT+pBGR+dBWf9jRsJEdVV8Wrb8uTxs42LK2n8C1jG9:x364okoapBG+BQ9jRsJYV+WrIuTxF2PU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/nDOC180224-021-AWB.scr

Files

nDOC180224-021-AWB.scr.xz
.xz
nDOC180224-021-AWB.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

UURz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 705KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ