PRE ALERT Docs_PONBOM01577[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PRE ALERT Docs_PONBOM01577.zip
Size

692KB
MD5

7438c50d98f5aae7b96c19562f6b4c8c
SHA1

ad9b480d26c23822ae33dc956b50ef3ef7cab610
SHA256

51909f2c56188438eec752a990e91027e3cd91da6db3d27e646bb0ceb0d87da6
SHA512

75c47234dd671cf1c74c614ce48b5b78ba7033def5d76dedff746ced6029762650c2c85b6e0d06106ed7b2a4978cc3c62507797d7bcec8d389fab9cfd159593e
SSDEEP

12288:+q7s8xeBJBKXztBg3jfiJjCAJK4dY2vb2Z8CGaqYvrhkEESqA7KvD042CNS6NRmF:l7s8QBJBoJq3jfKfKiviyCrDONSqAsIP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PRE ALERT Docs_PONBOM01577/PRE ALERT Docs_PONBOM01577.xlsx.exe

Files

PRE ALERT Docs_PONBOM01577.zip
.zip
PRE ALERT Docs_PONBOM01577/PRE ALERT Docs_PONBOM01577.xlsx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

slZY.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 683KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ