word[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

word.rar
Size

872KB
MD5

1fb622ca92985b30ff2370d39f1b2cda
SHA1

0827b8cd6c438a6cfc83be88708d9b451ebcb2db
SHA256

1730e88bbd889f88c3c9c8f4476b0dcbcaedef668dae686fad436fee44de1cc5
SHA512

22163930f9ab9ec18e75fd98a24eabbc88bc234eb52c696d7b1318800b93e5fa4c4ef59d1d3ca3a9f278b9d0ad54cff2f6b4904b30c2e43c860c64891f7884db
SSDEEP

24576:eQbqG/MVOJLTzx9gPZHCaKfqdUtcnqF1LUb2G:fqGf9xKAaKfqdwUKG

Score

1^/10

Malware Config

Signatures

Files

word.rar
.rar
word.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 935KB - Virtual size: 934KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ