DOCS[.]r15 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DOCS.r15
Size

516KB
MD5

7c6a84007e637a62e64bd342dc34e375
SHA1

1c40cc5266451ca7253a9d9d8ef79d37a63d0470
SHA256

229d1cc3c61cb8f23b8aa1d08dacd186d85cdb4d78a02948f5cc867c8e43f49e
SHA512

94b47eedb502415e90e6a0c718b7eeffdb9256f23b9207c68ecd115ad80a49cb7ea7cda105ed2e14bb11d14b838298502cccc9da5b92c5a2a5789fa10ca7d589
SSDEEP

12288:LJLsA9fk0ihLGNeJDK2jwoICSCw6kmbAC+FXgQ:b9fk0ihLOeNK8woRS56kmMPFX5

Score

N/A

Malware Config

Signatures

Files

DOCS.r15
.rar
DOC.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ