EagleAsia08appointmentletter[.]exe[.]v | Triage

Sharing

General

Target

EagleAsia08appointmentletter.exe.v
Size

682KB
MD5

0d7cce35f88ab81372525702aef249a9
SHA1

046c8ca2470a0e71d817fca08ffaa5d9b31dfb70
SHA256

97d0510ca5b726fb79ce77ed97dc5096310bc8fda449bab20d15d7386826b057
SHA512

1493f0c9cc628a1f4927b088de5a6717391773346ac209cbdc323d659dc39fe2f9c8675dc63d9cc8676cf1c0084655dbeea2fc18810654dfb485884c8e533e0b
SSDEEP

12288:E6SUmph87hSLSKE7alDgV1Nx2tho3WcJeIuMpm8+ifhBlv/FJ:8zj8FSLfef/No7o3VJZRdzX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EagleAsia08appointmentletter.exe.v

Files

EagleAsia08appointmentletter.exe.v
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 674KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ