Documents[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Documents.zip
Size

662KB
MD5

2375b88d00d8dd6c6a39817750c9a892
SHA1

e5f887862d70e61c918ea87d44077edde867eb1d
SHA256

5faa8d2710e693f5f6e31e576bea0deb0e11e46e6c60da6a4045c3a63f98b521
SHA512

5e95e61d13fb6fdbd4e5059cbe682404e5fd526b78cc18c2c024a06ed7df2389436bb784006b3efa2823fbeaa1f902f10a78c51b0901401d03b8e0ac0b312fa5
SSDEEP

12288:S7tCppPX3mmSWfHhplZrrU3L1gNiO2o4SXmz2rA4UnXtrDh9:EKpPHJSWfBplZ43L1gmo4SW2A99Pn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Documents..pdf................................................................................exe

Files

Documents.zip
.zip
Documents..pdf................................................................................exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

vimv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ