COBRA election-notice[.]rar

General

Target
COBRA election-notice.rar
Size 272KB
Sample240406-2asv6sdd47
SHA256 f7bae39b81e2674ffdebe1260c98d5881ef1a83a956ad7451fe7a0e14f3a7132
MD5 c50247dd3822daaf000ad4931e54c866
SHA1 0bea753ac3a6cccbc9bedcfc7ad865e1420a27d4
SHA512 702bb3d24083848d06a62064c00fcb4cf2e206cac97d3f0bf45e4c0f746269039ed6dda6a44bc539a829e2d0bb136f41ee1ffe83f1b14f279bb1c7236dfa090b
SSDEEP 6144:USegCmupgLsgVL/QfL7MH0u4cmuBMnsitkyiflYJ1:EppgLLQHMA5iixRJ1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/COBRA election-notice.pdf.lnk

File Explorer

COBRA election-notice.rar

.rar 272KB
COBRA election-notice.pdf.lnk

.exe 8.8MB

COBRA election-notice.rar

SHA256 f7bae39b81e2674ffdebe1260c98d5881ef1a83a956ad7451fe7a0e14f3a7132
MD5 c50247dd3822daaf000ad4931e54c866
SHA1 0bea753ac3a6cccbc9bedcfc7ad865e1420a27d4
SHA512 702bb3d24083848d06a62064c00fcb4cf2e206cac97d3f0bf45e4c0f746269039ed6dda6a44bc539a829e2d0bb136f41ee1ffe83f1b14f279bb1c7236dfa090b
SSDEEP 6144:USegCmupgLsgVL/QfL7MH0u4cmuBMnsitkyiflYJ1:EppgLLQHMA5iixRJ1
MD5 SHA1 SHA512 SSDEEP

COBRA election-notice.pdf.lnk

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 17ad92c5d4b0707380de23f0dc97a7d50319d3f332be6a6d9cf30d239d49f744
MD5 979d0840f1018723a0c2f1b38e053a87
SHA1 bc00bc18122b597d5484d05f6f1df694fa9f9f64
SHA512 2f6c2f764e0a9e057c25e32911721f47872e76b2cb9320342b7c221d088dab95806fc2d4499fa4151a508dc3a6fc35966d55410b6d53851cc1a382ad7c775729
SSDEEP 12288:u7WDZ2e76xWryJabHBAWAzADGBUghdvfKKmWe4b3hZ1I/p1LBaYXK:V8IKLJZZ1I/pu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

450510

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

COBRA election-notice.rar

COBRA election-notice.pdf.lnk

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

COBRA election-notice.rar

COBRA election-notice.pdf.lnk

mscoree

dotnet