gdoc[.]tar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gdoc.tar
Size

824KB
MD5

7838dadb4b8a8cf01daedbe52898710c
SHA1

8586e243a2fccef228d864f34091382334345701
SHA256

afe176034a48e99761aa0dc00f86fb2432c01e76f551ce2cadf59122fe64dde4
SHA512

c644350b828e32efe97a40a86f3280440ab02555fe787f1ea8d03694f8e0150e4b9d77ee41b979fa0292210739ccb2a2be11227c60a7c2673835ae76bf731256
SSDEEP

24576:3rO7r2g3YeguXIEQ9vxg+pkb5Z8+bphEZkmvHLQczF8:3rq2cIESxHklKOhsNHLQV

Score

1^/10

Malware Config

Signatures

Files

gdoc.tar
.rar

Password: 2261
DOCX_ADD_TRANSACCIONAL.exe
.exe windows x86

Password: 2261

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 564KB - Virtual size: 563KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ