Scan copy_doc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Scan copy_doc.exe
Size

696KB
MD5

a7f1583777f469163b38c446374e3213
SHA1

128a4ead87fc35688fa0a6bd8919f13e85a94a51
SHA256

0b566e1f7c6f828963b2c47b8e38ded81c0413afe7604166194f4a507dfbf1b6
SHA512

cff363c898a9308d67dd0c235c2bead50524f1efe90f44519f8aa1f7ee5e98f6296a6695bfd94db3efc2363711e67d5098770de32260cf5baa986a177b14870c
SSDEEP

12288:5c4vjRhc8JGzvNH/hrSnyz81vC1/6LyB7gmgruACCIxJY7EW2iN:RjRhU/xSNC1E6sR6A8TY7EW1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Scan copy_doc.exe

Files

Scan copy_doc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 680KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ