Documents[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Documents.rar
Size

749KB
MD5

d1b89485286a6c6d69bfdd84f2a28533
SHA1

5add2d926ced0c6b21f408fbee02875367c31a47
SHA256

fd69359a2620691c4409432dae20bcc957c9ba1f69f824b6eb36c3f5cd052d98
SHA512

0646560137e5a0284a323af7a0260dcff9acd0222e99f88491e8caecca46807de6acecb91dc2ec2300e293519f93f51827bc1435f76fffe70b437966d490f7e2
SSDEEP

12288:vHkjFmWIhrqTGj7zI9l2ycKRsKYXel9aMkHbdc/BzgP7ERh08LVo06j3CqOx3n9B:vHKFmWIVR7EnvckshXyazb+/BqIhVrb3

Score

1^/10

Malware Config

Signatures

Files

Documents.rar
.rar
Documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 862KB - Virtual size: 862KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ