documents[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

documents.exe
Size

668KB
MD5

5ee520e10e34410103b924fea75dd6fd
SHA1

05889802d131210f79c5826945a15031c5576474
SHA256

ac820c3407ffbcf44d390ddc97a716d102074c0e1f2c0635e5d621feb50b8df0
SHA512

3c2fc959019fc68a87c2b7837621d42850b7fbd1c6f58d35995f2b7a1a1ed1ff38ecfe854af44693ab6d7fe5ef195555847d4d4e5037d1aea005f31dc180a8f8
SSDEEP

12288:rvAgHtDg5xE17EzCDlYaLwMRH59B6r3l99lWQMf/NhqNRa9:94P2xYahbXS3/GJf2i

Score

N/A

Malware Config

Signatures

Files

documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ