CHEM-03022001 PRODUCT Co-LOI 50-60-docx[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CHEM-03022001 PRODUCT Co-LOI 50-60-docx.7z
Size

673KB
MD5

25ca2e946638075e6680247d36fe89e8
SHA1

c624f874ec032be8dbed7e2c5b9caa7a9637ab40
SHA256

49126028ac0894749a0d5b54a8f4d77d9a180c91cfe609f9585dc18073158398
SHA512

c583611302341bd3e95f942860297dcf44058d26f8678cb0dc56e437fe97077ac826c0cf9ecf98f6d5ac1d161b98c9be735e21d057b032a044141b0b004854cb
SSDEEP

12288:nYAC9ZdoR5LYZX83a2wGqawtBIEbup0lOCm9CFnzTJ5q+xesVcpa5pepkyDV:YPv+WI0GqhBIKuCOCm9CNJ5OsVc+peDx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/mhJTEU0jTIDARYr.exe

Files

CHEM-03022001 PRODUCT Co-LOI 50-60-docx.7z
.rar
mhJTEU0jTIDARYr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

EYao.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 716KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ