10062024_1604_10062024_Doc 06102024[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10062024_1604_10062024_Doc 06102024.zip
Size

2.7MB
MD5

f7235ecd2dd066e5e251a97843b6db3d
SHA1

f5968b57a14b4bf791c27ca27d4a9870c97dabdf
SHA256

a7a46fb2142c45c7b47826295e791c8665e18430c8a024382e52a536b04bf51d
SHA512

5b0bcb15f2fb2f79f12c0cf33de7fc61d0a4db51281726733bacb39f6236386a1b8d905b663f3ef8a65813f828eabd4e299c0e45d58cc9bcc02ed4e3f5d4b34f
SSDEEP

49152:5XbaeXG0/uUMkdFJcqzTHsS+yI7aPvZHvu6hFFcJJ2KtJW:JbLXX/ucdggwUIOp1Fw5a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Rtf10624.exe

Files

10062024_1604_10062024_Doc 06102024.zip
.zip

Password: infected
Rtf10624.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ