Q88_MT Carol 2024[.]09[.]10[.]doc[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Q88_MT Carol 2024.09.10.doc.scr.exe
Size

706KB
MD5

ebd8cf9ed8dc76980f83ca9450f8fe3d
SHA1

f593a2f10e321cf553363bad68da0ad7126b43aa
SHA256

10eed1464345d7548cbbe6e76ece440f249d9daf5bf13f973f68136d986c7fe5
SHA512

e899c095890d0798e092181860ec070c33ec2a051b8fe69c71683405b4faf157e1033164bc6ecc00197f48d1d7c16bcee7ff03c7a3d46eedf153492b0c110af3
SSDEEP

12288:f6yeSVGuNmR7Mhk/dEZ7MadyfLDW6sPSP2A7quV8/7e/R8Di6A1A9:f61SVsRAgEpMasfLySPl7TV8/ip8DPG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Q88_MT Carol 2024.09.10.doc.scr.exe

Files

Q88_MT Carol 2024.09.10.doc.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 695KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ