DRAFT docs[.]r15 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DRAFT docs.r15
Size

593KB
MD5

8e1f6daf2bda668d2c443c150bfef955
SHA1

815dec8ab418961bcd0e711e3955dc9f2bfcbd7b
SHA256

e9ef5a6fd05e55c24b571a9cb81e98cdc6eb4de78e8f92b39a7b032fa0916d92
SHA512

491d2798ca0d88546c55e593852af01eb96adf9b593da5f6b2c0091af4be43a854999e6beae30cb7a094856621bc8cf1f709f80ba43010f45c5e210e93c13a99
SSDEEP

12288:gZphIa6cgkAKxmlxEYjhaeQCmQvS67/jQjMVcHji5IVuEV3ruIkW:ChX6vcmfEYj0eQDQvSyrQ4VF5CxbIW

Score

N/A

Malware Config

Signatures

Files

DRAFT docs.r15
.rar
DRAFT docs.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 980KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ