První kopie[.]docx[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

První kopie.docx.exe
Size

1.2MB
MD5

6fbdc31300b2a03377976b3868682ffc
SHA1

b63edae9d5cfa8f78932e4c7bb951ebdad2b18ac
SHA256

f8a98f6720565d1ac05e9c1342e5bd669f46afe61626172cf4a692dd40822294
SHA512

0878fc7e875a3fdd450b85fac059a33743425a664c393702a114ae81b95022859590e1df08dae1c204a420d3f27e9f44b6bd46df2f039832e6a614b7a3d81739
SSDEEP

24576:iAcZEvFFoy8+hVNokyyXb9SpIVFLuFCfERGq+9Vgw15L8bc+jFo:rFl8+xo8LMOLnfERGXVgw15Qbck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
První kopie.docx.exe

Files

První kopie.docx.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ