Static task
static1
Behavioral task
behavioral1
Sample
Docs.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Docs.exe
Resource
win10v2004-20230220-en
General
-
Target
Docs.exe
-
Size
856KB
-
MD5
88f90cd0008c59999ae6b7484c24a4e9
-
SHA1
8ea0fd363ce60c8795d5e75dbfe21e868fc854be
-
SHA256
5fdb6e2373c18ec9d19f822279bce3d0e84c731ae8c0410fdd613c59379e6ad9
-
SHA512
477cf19b14e8a4393fc79694098f7ded64f355a7acc197fb7f0ceb9fa414d3e0e6071e56d09581d47b68ec36c6274337c9ff17bc9579cb26346773b354c39f1e
-
SSDEEP
24576:SXB3cOQLxJWzDrLlKq8K/A577i5VpMAE8B:R8rLlVQ7M8F8
Malware Config
Signatures
Files
-
Docs.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 846KB - Virtual size: 846KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ