28092024_0322_26092024_SITHIPHORN_Doc2709202400000[.]rar | Triage

Sharing

General

Target

28092024_0322_26092024_SITHIPHORN_Doc2709202400000.rar
Size

16KB
MD5

7e607a2d7a2d69326973c0ea3bdfb138
SHA1

401b4c78ec4b8ef5c99ab62e517540543d7df60c
SHA256

05575771a33878dd35e54bfbecadc79b6780cbdd8dd4ab4738e255f8ac6b64a7
SHA512

f21803cf2df4838f12072fd26ec97e53d9cee885fb0f9b771590e4a89fd30a6fc9f910ddd8b78e8c76712dc8c8868fe9157f68b4e7f438abc887bc5c91b5610c
SSDEEP

384:L22eETT+Jzx4Tn+AcDgxUJ0tz5Ij1O/zpI1wve1cOt20:kETT+Jzx8SDPUz5ZpI1wve1cOo0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SITHIPHORN_Doc2709202400000.exe

Files

28092024_0322_26092024_SITHIPHORN_Doc2709202400000.rar
.rar

Password: infected
SITHIPHORN_Doc2709202400000.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ