documents[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

documents.exe
Size

1.1MB
MD5

a54895ee403246fc977b7ce6cf67ae3e
SHA1

63f002cdfcae672339792cd1bf48183e5ff7d182
SHA256

ddb24ba8d91f511ca86554d35f16cb9ef5d6103f5275c90217bc8ddb35111616
SHA512

e9ade8de7ef64bc1ac638ee2eeb27d450123e7be61249bc84fffff6522c95367d46c6de4777d03ef2299b751c59c0be7931432ed3bf2ec18e8e3f931f6dfc0ea
SSDEEP

12288:8n1oneh6HA8uyhDWxvNlA/Nz3iVxGfSHh1C97ZLo4d9YqoxnXwzQPvZWoM/:8mneX9yhDW/lgRyXrC9G4wvwzQP0oM/

Score

N/A

Malware Config

Signatures

Files

documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ