Docs[.]exe | Triage

Submit
Reports

Overview

overview

Static

static

1

Docs.exe

windows7-x64

Docs.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

Docs.exe

Resource

win7-20221111-en

agenttesla collection keylogger spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

Docs.exe

Resource

win10v2004-20220812-en

agenttesla collection keylogger spyware stealer trojan

windows10-2004-x64

9 signatures

150 seconds

General

Target

Docs.exe
Size

537KB
MD5

b983d7ae5788fb40c2fda069ef162fc4
SHA1

d8bad219e4c0520afd19de5e0ec1842c5f56f9e1
SHA256

23b23bbc8497e567eba43518485bb19fe70d295e54e5af14f90d233b33d862f9
SHA512

b8789ac9f36d786eae1e0b4182f906a08419b8380fe0de4cfc97e59ccaa0236d1a0d615751582606691368b1d854f649127f34d1aec6016de763ca656a0f90cf
SSDEEP

12288:S7rhVe5d6U6sRg9db30NOQA+/7lP2alQDL50VOcORIGhCTAaLmAiN3DyuUjW4nRg:8LsRg9db30NOQA+/7lPI0VxUIGhCdfeG

Score

1^/10

Malware Config

Signatures

Files

Docs.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 534KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy