DOCUMENT34789208exe[.]exe | Triage

Sharing

General

Target

DOCUMENT34789208exe.exe
Size

1.0MB
MD5

2fba125e55b4145326e15962775e8c33
SHA1

7eb926aec6bf42e00a2a68c148e185d2f3de86e9
SHA256

c5a6df42235a175be31fec2a8eae40ba6263d48a207debbe1c4cde98861182c8
SHA512

ddee0387b55848f249de957cdcf21c01a5ee54945dbabf8fb8ed93635e34edab36c3b5ef956e2405fe35b6f3994abb593d3a7819ff4bb7ee57815dba3aeb8b2a
SSDEEP

12288:Tg0hXCPJcPDxqVPVcKNJycqM0bQOksecpF24/rUYECb0ndeE8FVACkd3/ENs5oY1:5vSPByJMzW24/gzB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DOCUMENT34789208exe.exe

Files

DOCUMENT34789208exe.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ