Static task
static1
Behavioral task
behavioral1
Sample
Documents.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Documents.exe
Resource
win10v2004-20220812-en
General
-
Target
Documents.exe
-
Size
1.4MB
-
MD5
cc0f7853951cc060df6fba320853caf6
-
SHA1
4731a5de5ca911bfc59323d1f1ba86cd81217b49
-
SHA256
d288d112803cc81d6d78ae0e11766481553d280d3644f75208825aba7362870d
-
SHA512
6e063bd0d7ce0c20f2d493f0104f001e7b2be7a421609c98e5b709bd08ec4432d41cc7f147875461f4fd5ced935ed563d0ab532532f99a78eabcd3edc997a850
-
SSDEEP
24576:nKXB4Ron1z3es/LitORJ+w6lJYDJ1pPC4IXPxJorX34JZN7+39DeLW:nKXGqnN3es/LiJwxV19C42nob3o7ko
Malware Config
Signatures
Files
-
Documents.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ