Deklarasi __-29-7 docx[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Deklarasi __-29-7 docx.z
Size

1.0MB
MD5

4094babdc1bb6be42e7b881638654d41
SHA1

4175e5d7a82a8878216c4154b7f30f6b955a7e2a
SHA256

91178985bc898afaf5482b3aaf64971db67e5370e0a56d90fafab40b74b80fbe
SHA512

1a234d99c73dd1abf9ff5c3af7d0b27bb692dcc1d442a75bf8f398de382d2e64e89d50fde08cee910249aac57e20c5ccd4d48104a5938e125e269ed28cbb6319
SSDEEP

24576:hMFk2VdsiYgotBr+szKoe+cQQjzdWb4QG:hr2Vz+roNzd/QG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Deklarasi __-29-7.docx.exe

Files

Deklarasi __-29-7 docx.z
.rar
Deklarasi __-29-7.docx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ