Documents[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Documents.exe
Size

625KB
MD5

cb097740f9fa8e3de0f27afa58ae628d
SHA1

8611649e871024afff33622ea5138c94f817f411
SHA256

4b400ae71cf7cf4f1125e27b683861b698fa6ade4f8fdeba92c0ac819b72bcb6
SHA512

e9fd7a055f37425438e934aca7fbd9ba16f28deb734fc6703b821a3ceb6f4e065c6ec5661de4a4ecbca8b155641437b4238bf0d66241c09b612f335a36a9b229
SSDEEP

12288:BqUbm3i4ihUIMSrwjDo/GnIcKReNxj2+HtsRm+DaoqMA:RbmSw4rwjyGILoPND+3qT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Documents.exe

Files

Documents.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 622KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ