Doc 1Z881A080453968203[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Doc 1Z881A080453968203.zip
Size

674KB
MD5

273967eea40e6fa94bfdfa3513aa824d
SHA1

353366f31dfb626ab4acc1fcd7212d03bf7216fd
SHA256

060f3e6f0d30c56655db714d84e819bbd3c9aba9be89bba09bb4361673e39438
SHA512

c930fd47e5c4a116536de861344b38072e592bfa0286a8d0e7deb8bae93a9e77b175a7bfa9f419c4d20f9ea84afdd0c8a7098f3a5f1b67906a137682fabe2f63
SSDEEP

12288:/JnNjY8pJMf4c8hmpWpXHJHVEwxGKny7UtCV34E1ylv/13tg3u:/JnZdpq4r9dp1zxMwsPyh/Rm3u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Doc 1Z881A080453968203.exe

Files

Doc 1Z881A080453968203.zip
.zip
Doc 1Z881A080453968203.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 700KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ