Static task
static1
Behavioral task
behavioral1
Sample
Documents.exe
Resource
win7-20230712-en
General
-
Target
Documents.exe
-
Size
708KB
-
MD5
3bb5b5a4af42d31077274d97f5e828e0
-
SHA1
68dfba8644f59a117db3382fc6d4593b549843cb
-
SHA256
b9f2a6e3ff5946321af9a9c611553dd49bbe967194afc0b1cb457c288b211d80
-
SHA512
7b9e9a995d364f5fcfaada8f089e04f49ca2df44fa277f1a8983e17b25b6aabf8e8470f27380566e952a50ab8bf97923ccb3783c90949ce7ceee01eeb0377db8
-
SSDEEP
12288:nRju+nOlxRt/5Siw1nOXsDKxZFik2dv67zMpppNpppppoOQpppNpppppoO:nAl/w1O++ZFi167zMpppNpppppoOQpp1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Documents.exe
Files
-
Documents.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 706KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ