26092024_0338_25092024_DOC[.]rar | Triage

Sharing

General

Target

26092024_0338_25092024_DOC.rar
Size

606KB
MD5

83cd759a0490655a9824076dc3611339
SHA1

73b81897833bd21d99a743ab82d7ba44e9968506
SHA256

6378bc24c53c4833869f79345c6fc69a1bab60f8b038fc4a6b15d3a0fbd2b534
SHA512

2a08767d7aac8f94a3d0550f9aa2f7e9445e4327afeb5470027cd1752fd87e64f92dccc2ae385fefff4ae221e607a25af14a3c969d54fa9a9eab85fe034d1446
SSDEEP

12288:BOVwSsmLtJewQCwhUtWFTS9J0oJnV8+LcpXrY22h9FktNd+AsHUM1KS1l:iLt0/dheWFMGoJnV8NlZQ+wATM1KS1l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ZXscQQ9xOnwb76m.exe

Files

26092024_0338_25092024_DOC.rar
.rar

Password: infected
ZXscQQ9xOnwb76m.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dfso.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ