10062024_1358_08062024_Central_Employee_Self_Service_Management_slip[.]rar

General

Target

10062024_1358_08062024_Central_Employee_Self_Service_Management_slip.rar
Size

592KB
MD5

3a137c69eb4aba80e21b8a9affd4bb20
SHA1

f76c62c99e93d49cf11f3a97cd9920359ee811a4
SHA256

a8f4447ab359d862b4856e0dd719cd00f4d32ba76bb755ed31a28b9d46d68c8d
SHA512

4f39b2b035bf38b8dee62d19f80b05de4bc4ac580ade63a6d951884b3ee4a986e3ca4411281accc24ffd8b37f2ba7fdccffe86e4c39733ec5ffef55bbebb648e
SSDEEP

12288:1hQvMwYL6GLDr1b+pDcdUqKxEeSO8IOycsTFzZy7KAi5oR:nIYL5Xr1bBdMEeSbScoFqKD4

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Central_Employee_Self_Service_Management_slip.exe

10062024_1358_08062024_Central_Employee_Self_Service_Management_slip.rar
.rar

Password: infected
Central_Employee_Self_Service_Management_slip.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 602KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ