rtf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rtf.exe
Size

163KB
MD5

aff2d10a2e24c16a8c70f57beeb382f2
SHA1

0de85ae5e7bef47438a0f832e90054b38ddbc1bc
SHA256

f8b91c3419d4afe1cd3cdb4deffa3baa3f0e8dd92f41784d99497106075267d8
SHA512

5a8cb8dc4c0e74f27fb7702f352c6fc5c717f1720280cc45a5aa8d8d1838b829230fb4c7ed4127a2e7b3e63c97501cbad5e465c48cd9723c7005983c71555761
SSDEEP

3072:nSgrHpf8g1jya056CqqLyBiORGFF0xtALqIv2qTMUCJUB:NLjya0MHqLzDLDOErwU

Score

N/A

Malware Config

Signatures

Files

rtf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ