ImmDocNet[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ImmDocNet.exe
Size

184KB
MD5

18368be8d824107adb44178b7d9d6e8d
SHA1

8f81264baa36834fef207eff0b2f17b2cb114a54
SHA256

12f5dd6497964bb8f7ecafe5bed77552167b32de415789d13fec26d48ba944ec
SHA512

cedcb31988169e4c0eb96491fadd0959a875028e5f9b0d2eeebc055fb637c0ffe1c6b85bb6eae9303ec35e59bed099e1d11231bb3bcd2c5985a65ba8e75a0799
SSDEEP

3072:SfD45Q82kYwf/E+LJhInvV0GTXHQQaZZnByKvU3pe3b0+dzCf:3h2C8OWnvLRuYobHd+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ImmDocNet.exe

Files

ImmDocNet.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ