Office2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Office2.exe
Size

1.4MB
MD5

1e1961c1b3fab9d3213365d7b2a6d4ac
SHA1

fd27fb12e4b6e1af127170891001c3134e51f892
SHA256

39a4a3be1713f0b478d730f0faa7dbb2c7cc936f7e74f47b0c5649809d4e0cb4
SHA512

3c0235c66fdd997b9aa5f75326c071215ba64ea933befafad5f2805df223aea21a6db432da8ec754af59d476218c2b3d433f677585e26bf5ed6c1036ba5d77ec
SSDEEP

24576:yDqw4fKBK9KzKdyfKV6Kta3y8dvPIk7H5jlmCHMuB46sNJFyh0AFOzIkY:yXBK9KzKdyfKV6KtIRPdHZQCvZAJFyhx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Office2.exe

Files

Office2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ