Doc1-TelexRelease001[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Doc1-TelexRelease001.exe
Size

766KB
MD5

b426ef772a038744bf16056a578de175
SHA1

4bc64b3ab982228cdfd30d1116a3f7676cb1efb8
SHA256

6cd45bf3606bedb28730fa551baa7ff5a8599a7d6e220f81aa1e1d5d484cf088
SHA512

f3a9ff92314fad73e28cda7887b39ad61b4d07182d9c59babb1d09f481cb4ff9a44ef6d6cc52a134ff374688c44c940de703f32338a469728c2fb2abe94ad916
SSDEEP

12288:ZN2U2iNAOlMrjNFQlGq4Ohf7YYqOXgdO5X/mxljIdHWsQOy7Ijto21:ZNT132VcGu1dqOwdO5Pc4HtQXktv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Doc1-TelexRelease001.exe

Files

Doc1-TelexRelease001.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ABQX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 763KB - Virtual size: 763KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ