Static task
static1
Behavioral task
behavioral1
Sample
Document.exe
Resource
win7-20230712-en
General
-
Target
Document.exe
-
Size
628KB
-
MD5
85dd400cf4a587a7f5ebb27035eb4a29
-
SHA1
1d39c377c106df23b1240dd272314b1a4f39cb4d
-
SHA256
ddd19c40c8ac0970b895e4a7476e9433f7cb774f6b7b550db914b0e40e636441
-
SHA512
9ebbe832844faca5913c8f9db6c4c8221a830e548db95473279aad15915234d455dae9457f652dca7c491ec4d42bd58d105c5f757fd0aace49b9699970664d5a
-
SSDEEP
6144:ktT+iT+Ayp1I2Rrz5irIMW01DASCNrxuvm2Kyeylyej/3uZGhVjS4Z2/O1t9dz+w:ktBGpNrpwuFxhM/j2QPjSfO1Xde2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Document.exe
Files
-
Document.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ