COBRA election-notice[.]rar | Triage

Sharing

General

Target

COBRA election-notice.rar
Size

272KB
MD5

c50247dd3822daaf000ad4931e54c866
SHA1

0bea753ac3a6cccbc9bedcfc7ad865e1420a27d4
SHA256

f7bae39b81e2674ffdebe1260c98d5881ef1a83a956ad7451fe7a0e14f3a7132
SHA512

702bb3d24083848d06a62064c00fcb4cf2e206cac97d3f0bf45e4c0f746269039ed6dda6a44bc539a829e2d0bb136f41ee1ffe83f1b14f279bb1c7236dfa090b
SSDEEP

6144:USegCmupgLsgVL/QfL7MH0u4cmuBMnsitkyiflYJ1:EppgLLQHMA5iixRJ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/COBRA election-notice.pdf.lnk

Files

COBRA election-notice.rar
.rar
COBRA election-notice.pdf.lnk
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ