DOCX_6802_1755_02_2023[.][.]exe | Triage

Sharing

General

Target

DOCX_6802_1755_02_2023..exe
Size

1.2MB
MD5

fec5f029902eaf33a54b0a7b266f377d
SHA1

b3a8d8df1089274758a3f0503e097d06e51730d3
SHA256

9facad6fd7d77eb992b4deb73fe102d571d7e36d29d7f0970d1c1e1e12cd5635
SHA512

dacd2eebd2dd567e4e332679d8e6317700b6eebf009588cca19ad06b2ef5c5ca9d6ba1e17a30c8e5dd25bced38cda0c8a47487604ced58268acbf67318b2ef04
SSDEEP

12288:T3gndrEp7MW7O3AJYWhtAdsL38MsDpN9JUNXU+wEV:T3gGp9O3AJYEtT3sDL92N9V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DOCX_6802_1755_02_2023..exe

Files

DOCX_6802_1755_02_2023..exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 525KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ