DOCUMENTS ASEAN[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DOCUMENTS ASEAN.exe
Size

681KB
MD5

f6ee0d97bb144c4a1bea1e286fcc8e03
SHA1

a450a7bbfd31eaf24acff91e16dd5175b62baef5
SHA256

8f0bf864ad5fcf1f86713bd1d2f554f774e206a0374f45753edcca144755539a
SHA512

2a79be334161a9088a49c7a4aaa7c09200eefb1518b81ee6011ebf857f6bd757b0edba3807c63b51fe9c456726421b3232cee0c457588652446c8c958450f480
SSDEEP

12288:kHLQjSVWOU+Cb7TCjO0/gOow+GmtaLu+B7ByTvf9Pf:daT37ByTvfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DOCUMENTS ASEAN.exe

Files

DOCUMENTS ASEAN.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 679KB - Virtual size: 678KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ