Office Macro Downloader [.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Office Macro Downloader .exe
Size

430KB
MD5

30bae862a4cd00e461b2fd8b62478a9e
SHA1

b3322f9ce5e1af560e1728e17ce33abcf864b3ac
SHA256

eef68ae2e4dbd361f992f5859b11e6ee36d5f609b8f985311b9aa6ffc4fd640a
SHA512

f1137b6bed62657351f56cf476ddc4c22779259b6fa40ad0e2a27d08ca7d8841f0c14b9ff11872537cf051999b2d957b05958c847b65ebeb58b6aff5a5cce0bd
SSDEEP

3072:/6aAwZeatSQLDZedlMqyFjTyUbOIsnssssssssess8ssssssssssasftUsssss57://MaDgSFjmUaHFjmUa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Office Macro Downloader .exe

Files

Office Macro Downloader .exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ