docjoh20230925[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

docjoh20230925.exe
Size

373KB
MD5

f8050d0af7ac48aacab3cc8fead40277
SHA1

2dcac21e4831d0f09ea766fa0276b165e09a485f
SHA256

abf9b6a9caacf86ccc918d23393a24096d08345375f2765bbb6a675fad211c49
SHA512

e0791430b4fa4bea2a7a1e9cd88598f7f0b317762cf614e5177d0e1feef42a3c3fa5a7e9ede2c5cea0245eb9144d3cd242ae258b5180b5f379aa0f7ba17154b9
SSDEEP

6144:J71fdazUBaZvlVIRH/AYGLrbMlMt9UcfOtkEOsXP5LDZ:J11JMzIRVGL/VXU9/P5LN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
docjoh20230925.exe

Files

docjoh20230925.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ