dddeca806aee913371273af4a6ca36766a59c1d889a4953e387653616a18c8ac[.]eml | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dddeca806aee913371273af4a6ca36766a59c1d889a4953e387653616a18c8ac.eml
Size

365KB
MD5

6e9cc12026fa74871c1c6fcf27ea99e8
SHA1

7ec33c3328a06fd8a4a71107d0ee52d1504e938a
SHA256

dddeca806aee913371273af4a6ca36766a59c1d889a4953e387653616a18c8ac
SHA512

1cc2155b1f0bd88921407bcda57ea98f7281a582a94302a98b0b45ebda9bb8e4bfe7994fb1cb89195ce75b31d881914e1a5963de2742ce4401568196d376d3af
SSDEEP

6144:HODKjdZbmjW7LZhmzxpqsE6U/+7CKVOo6DzxTxTLvHRVj/u2MWvLUwCb7r:S+dhBZ473E6U/6Oo6hTRLRx/u2lHk7r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/POORD20231109001.bat

Files

dddeca806aee913371273af4a6ca36766a59c1d889a4953e387653616a18c8ac.eml
.eml
POORD20231109001.7z
.7z
POORD20231109001.bat
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
email-html-1.txt
.html