562720_docx[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

562720_docx.exe
Size

2.7MB
MD5

e91208f7cebcaa719faf36604d0f7095
SHA1

4ea06385857c44cfa93916569029e5421642b4a7
SHA256

6fd84d8f93ed3a6b37c938b22ac46dbb81b3710fc4e612e78c275c2ce69af81b
SHA512

15f6014c4184fb945673475a83a9a3108c7e0b56049279860d410e65b5d5f4d4f8bdb2f31b82205d43e6d84f3512b9617cabceffb93b9071c35f7009e29c097c
SSDEEP

24576:ayfaCYOk1NuydV/zBMmoTHvAlSBYBQ7+GEtY5kdtvaI509iy5kHuJMAx0cDxjJHy:SNU7bYy5l/0cDxj

Score

1^/10

Malware Config

Signatures

Files

562720_docx.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ