New Document[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Document.gz
Size

653KB
MD5

25311b4fbf626252c00ee801e9e77405
SHA1

dcd8eb0fe8604b166e00745ab5bc91039d6b3cf5
SHA256

5b896f9f74d601e6a7cc476fdc93d68c58ea7d72954cc6b70062346e5966f50f
SHA512

7669f3ff2e9d33fe798bc9d95e7b55e636e3c090735229062db8bbc52f78553912fda2ded93edd9d2cfae1a244994f329b3d5d422cf0b83514bdd3257b3545d1
SSDEEP

12288:lkIRyxjN5wKCi870R/qCbtgI9ssTmXS5dEkbGgdXrXG+Vb+IuRsGz2IQsuikHc1j:loxI1vvCqI9l6XS5dENmG+Vb+Iudcsum

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/New Document.exe

Files

New Document.gz
.rar
New Document.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 690KB - Virtual size: 690KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ