765061055[.]eml | Triage

Sharing

General

Target

765061055.eml
Size

742KB
MD5

ec9eabae2e8de47174e9e8694f551125
SHA1

da4896b46215dcc541e7c2c01e6b310f098d2c73
SHA256

5d3ff563dbd2de7ce1866855c81e8feccf6685e5a0b3776176a4e3f0c37db523
SHA512

a37168c888d62adaa99ed515af20b5e340fcbeb53af74c83a35fbcc0c62c22186015acf8c57de68c6bff8f851bdfdcf0855a824ca457beb1b283c9cd352f1790
SSDEEP

12288:+da79QbhrjuFVin1StayyRGVEBx3bhNOzzcbYtUpwxPvMn++EqpO8xIRN7N3irBt:+q9kgi1y727NVIUpevhyY86ED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/PDA STATEMENT.pdf.exe

Files

765061055.eml
.eml
PDA STATEMENT.pdf.zip
.zip
PDA STATEMENT.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

zGCm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 623KB - Virtual size: 623KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-2.txt
.html
email-plain-1.txt