ST120ST1100 (ST)[.]doc[.]exe | Triage

Sharing

General

Target

ST120ST1100 (ST).doc.exe
Size

886KB
MD5

0969f4734166d4213b402bd43ccb68a1
SHA1

2b6f818c885749489f281ef83aeb88fee0f4851c
SHA256

bf876c98490e467664b991ca81b9d5159cf3360d8c89909b0d07acd96aa5d635
SHA512

e5f1434b85b36543228f174e20febc9a93aa1ea3d8b7df012483fdf45ad00756d1a3ce71c61ab572b0d3829f5b38329d5cce7d976f6cafecf360f993100f72e6
SSDEEP

24576:HsE7jeXykYKmbAsXCjKK4qSUfCom6CX2Z:gyk8JXOKKfhNm6Cm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ST120ST1100 (ST).doc.exe

Files

ST120ST1100 (ST).doc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 837KB - Virtual size: 836KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ