Invoice-AWB-Document[.]DOC_1[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Invoice-AWB-Document.DOC_1.gz
Size

417KB
MD5

49586eae3b62b9c3cd7d83ac4aef654f
SHA1

21638d9debd4daa08e907ba83fee9bcb244f329b
SHA256

b0171d1ac28c849c2e62a6bc039d3960c6fbfe1440946fc7a06007c6dc25d492
SHA512

b450d19f58bfb41ba2ad07f993a14338ff1e36a18b4f24a3660023115ed8cabf2b7e3e490aafdf1b3b4e5432e769e2250f48dc190c72ac85da469a108019c64e
SSDEEP

6144:oK9WxBX20/02fL4Qfdp0nbrM9CB4c3rfgRaGEFIF0QlMigrBajLzyTo1hDTtTvfL:jg2QXfdSbrMhc3MDJ0CgSLcmSkDPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Invoice-AWB-Document.exe

Files

Invoice-AWB-Document.DOC_1.gz
.gz
Invoice-AWB-Document.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

gOGK.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ