shipping Document[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

shipping Document.exe
Size

188KB
MD5

5f7dfc4ae88706af55945fd2ec919e1d
SHA1

50d1f68140fcd2c4f4dc4499802d959cd1a2887b
SHA256

14088258ff20124aba93012518d4e2949b30a41165d9108d943dca7045c19717
SHA512

3b65cc6864cd238bb1c39e43f893765741b412df96b37b0d0cf75a04f8c8f288f62b896ce4b384077b354e29d527d1c61eb7ecfd681eb569c24725684729aaca
SSDEEP

3072:vqPqdU6r7MtZsYP32n8zlurgS8CztF/7Xp/F6bwDvyWc4LoS8P1j0qGyI:vEaUvt2028JusYH/TCEDqrg8

Score

N/A

Malware Config

Signatures

Files

shipping Document.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ