documents[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

documents.exe
Size

1.0MB
MD5

a7232e16c639beed19e1e085d4e68c0e
SHA1

70c6a859246098404ca1be0b7bc83fcd2126e277
SHA256

f71b2dd8880265d3b8afe644b333aa88ea69dc976445577f069b87e34b17b340
SHA512

b8f7ba699b70b59d4dab61a213448589319e653102b54a141332d732413afba9fe94448f9f9dd93f8a3794a2356f34b911d31d6b7ce3f0a474dec4936eeb41c2
SSDEEP

24576:vrs04L1H+vuxXc5nTKTEmFsyKGorX3g39:zs3L5+Rh0spGob3G

Score

N/A

Malware Config

Signatures

Files

documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1022KB - Virtual size: 1022KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ