shipping doc[.]r15 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

shipping doc.r15
Size

771KB
MD5

a6c8db7c2e53eaba178807fb577c70b8
SHA1

22394b5bc68a40c07eea68c3b54141422264e1a3
SHA256

6a1952327779a3dea87cc63fa3ec94ae7950cb91852b133f77111aec1823fbc6
SHA512

063211f53bbc7a59fc8e3e7255abb4d73e9cb9018e342fd1b753139e04faa2a7e4d9a79fc3f7762b1b413921f756d9cdf2022d890a605e9421117e1850c828d1
SSDEEP

12288:aKIN7fcVWGyGrAbKEPkB6Z4H0BeJIJK8TxuGu3GZ43u8hvjDFcxzRQyN0:U7fcVbprAb1kB6YiN08dpZv8h/FaXN0

Score

1^/10

Malware Config

Signatures

Files

shipping doc.r15
.rar
shipping doc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 960KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ