mail[.]eml | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mail.eml
Size

926KB
MD5

e560bda48cfd51e8c2cf60646ec9bd4f
SHA1

cca23d7e81c91571c2655bcb8f17e39736622955
SHA256

248c380f7b4f5579efcbed0b3e0832e0aa834eacb24aae3a78fd2f9c72a08317
SHA512

e32513afccebc79c4bb2f312c611182da07a7fb102a4d58d1907bece2a8225fc3c83708cc924ce5922b5d231734740bc691a5ec0fa5448959ab83fc7223e6eac
SSDEEP

24576:MsY99Jvb6TpPuM4GDXx4PjvM/k4DZqYBx1TX7:ivbcPBLTYjU849

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Requirements.exe

Files

mail.eml
.eml
Requirements.zip
.zip
Requirements.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt
.html