Doc1-TelexRelease001[.]r09[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Doc1-TelexRelease001.r09.rar
Size

684KB
MD5

e605aea3fbd59de4f79abf4836fa8ab3
SHA1

37ba8ac9d209ca855a87bd52ab6b68810be3e9ef
SHA256

8ac128cfec2b2fc05955afb2ef63a49fec4c3f74d95b63569130c1d45a7d6d33
SHA512

e9b4e43bd398fcba8567aeed349ae61718f22befc6ae4981e0014342f40478801a65f786dac1570927378fd9c184b07fe8c831b707cd85fd5bf9105f0a867275
SSDEEP

12288:cdmzyfbFj+4qSHT27FgWP+dyiVBFxB5XR63W4zL0G9EQhpSmwK5Tw3k7jjSSl:cdmzARqay7F32d1VTpR6loGjcCTw38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Doc1-TelexRelease001.exe

Files

Doc1-TelexRelease001.r09.rar
.rar
Doc1-TelexRelease001.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ABQX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 763KB - Virtual size: 763KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ