156084137[.]eml | Triage

Sharing

Copy URL Twitter E-mail

General

Target

156084137.eml
Size

67KB
MD5

cb39e40b3790194de4532783d5ae76cd
SHA1

4e30d3d6c15f05cdc34b6cc7ada418c3469d16cf
SHA256

c575cfc8017d9a475b60bba6978d8348bdaf02711f8776f3fecf1eba46cc7dda
SHA512

49148a730c9ba7d1dab56c96db32201e067a2974c9826106687f58eeb854248ba44e3609dd75ce2bdabab94eb449a24bbb9fb54451c3a3447d4b775bf03a5668
SSDEEP

1536:YJ/ucbEV+VglnOrL3YHs1oUcFjM2ul6YSDA5gl7TpeuXxcboA2s8YH:5cbJgl43YHsJtlscm7lq2/w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/NEW PO #0421 - 11.7.2023.exe

Files

156084137.eml
.eml
NEW PO #0421 - 11.7.2023.gz
.gz
NEW PO #0421 - 11.7.2023.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Triwn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-plain-1.txt