ISF document[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ISF document.exe
Size

662KB
MD5

fd20b43b7cf8141585e66e6294e903d0
SHA1

1348289f1e057f514d33dc196de3b38d04327f72
SHA256

b830c7a15a447cf7fc33ea29907be1626e3c5e420e9535580f46269c85948a6d
SHA512

956434ed05600a6bc207d2e6cf31d06ffd69b862925d7e37e90cdfb0fe06bfbe6422bd07377fdc99c860b1296acdc5ca1447c337fc173c09f16c7eaa9680e7c6
SSDEEP

12288:lVp0K8s6ow4utXo4ZAkKUcE8T0sJdHtfgPsO5wRuTDI5EvV8Hic6:lVp0K8s6ow4TkbvxsbHZgPX5wRaIxic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ISF document.exe

Files

ISF document.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ