3deb058f6d8500d670d08e87f972517c20605325f7885460075ae1b1ac7a2731 | Triage

Sharing

General

Target

3deb058f6d8500d670d08e87f972517c20605325f7885460075ae1b1ac7a2731
Size

658KB
MD5

14ab1298380a8c7ed36d24a677a2dcb7
SHA1

4e8e44d7d40157bb95bd41c2ef441b1c347480cc
SHA256

3deb058f6d8500d670d08e87f972517c20605325f7885460075ae1b1ac7a2731
SHA512

fa779c2e0609e1bc583d2c7f4494f7e2ffd3c2acd88aa5b1797a5aec58c680b9ef87c5cc03437f156db6e89d20e7f208071a0cf8d1687425474ad391c4b3a8dc
SSDEEP

12288:GfJcpgYlBIJXy8ZHEilz47j1V74+RZ4+OFvvFWiOLqxHGGWzKRcxPzLkrYh:3N7MHEOk7Fr4+OVLOLqcMRxEh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/scan-doc.exe

Files

3deb058f6d8500d670d08e87f972517c20605325f7885460075ae1b1ac7a2731
.zip
scan-doc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

NVWD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 685KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ