Static task
static1
General
-
Target
0.eml
-
Size
1.7MB
-
MD5
619b4f64bb3aa78adc7079059193cdaf
-
SHA1
29ef018a5fbbdb36b3f23114792362636a11f7ce
-
SHA256
a7f77bd17f46c899fb139eefa4150f598639699fb5bafff8a008866ad70e1d00
-
SHA512
3332e60950f17528d296dd4696ab0ab8f9e4c4708f169ee9aef0880d91bfd23f15e74234b2ac12e43c4951ea6ff86e1cabed196dc5a6aaa8dd34b6821925f2a8
-
SSDEEP
24576:ZNAmIqiBIo9x5D4RGCcqlQsMZK7yxhjVs6xxXD888s1/NcrLh8XHMZqg1TsPab3U:+t/5DkKbVdx1D8gelrU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/signed BOL # A224822.exe
Files
-
0.eml.eml
-
http://www.coralcalcium.com/
-
-
email-html-1.txt.html
-
signed BOL # A224822.zip.zip
-
signed BOL # A224822.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 725KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ