PHGT_DOCUMENTS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PHGT_DOCUMENTS.exe
Size

16KB
MD5

2b80da19e393ee4a39012d1df214f5bc
SHA1

cfd91efba06337671d2e44c1aae4afb72f5d67da
SHA256

a1cc597fcbe89163f9a2a2eb6f0984c1ec591d56fad0975fcb4d80c8b022abe0
SHA512

241593819bd6ff6706c98fbe9efcf9b2015b3c4dec07d4aa2c671d0b590fc900faead49c5e201df573d02f01bad040d80ddefe1f20e022947af39bcaac3a0099
SSDEEP

384:sH21w9JTLD9ttuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuzLbG7d10r8:/1w9JTLD9ttuuuuuuuuuuuuuuuuuuuu4

Score

N/A

Malware Config

Signatures

Files

PHGT_DOCUMENTS.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ