C0R560891T160556747[.]eml | Triage

Sharing

Copy URL Twitter E-mail

General

Target

C0R560891T160556747.eml
Size

869KB
MD5

d888b8be1bfdd90fee19385901531945
SHA1

79e513f024095d645041871566630c00e212940a
SHA256

042fe843c9ce1f971a5c8c1142a33ff0acc2634f235acb084011d9d47066228f
SHA512

1bbd83dc1e00b52fbcdd0606c77b4a369d46bad9df54bafaea72caab775f1cb76c4416d2751a3d3c8b559f6c1242e4229eaee0408699bf8a63b67fd771d66416
SSDEEP

24576:FdE9M91F0d3R8cC08HreA3/qvihinqSfpuwzltb0:F6M91idh8cCTLjZqqSE0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/AWB DOCS.exe

Files

C0R560891T160556747.eml
.eml
AWB DOCS.7z
.7z
AWB DOCS.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bf23720e403af383c07a6250e774f77f.png
.png
d8134bcd3698d77d1e94a8823847ceed.png
.png
email-html-1.txt
.html