OFFICE_2[.]EXE | Triage

Sharing

Copy URL Twitter E-mail

General

Target

OFFICE_2.EXE
Size

15.1MB
MD5

d84c529d8b89ff9e1ee450bf31fa2691
SHA1

3b371ff879d982955f65c4a8c84cac72bf6a22d2
SHA256

c892f0b65039d03898144a45b93d48695413a3ee560cf998f931391199b7e39b
SHA512

cb194e5fce56a56fc6cc811d1cd7ae686aeb8d4ec246950f64080c65fe54fc8a5e744b7aaeac0aa25978967a4af3728dd4b480140b009868816c3a0c0388b267
SSDEEP

49152:NXXGDUhWpLRhWpqMe0A7NC49ZDYSX1UFqQmNeLa1o3kYQHjOCAJ/Lsb63lqZGNmR:NmDDDPN2UxAJDh3F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OFFICE_2.EXE

Files

OFFICE_2.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14.7MB - Virtual size: 14.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ