DRAFT DOCS RSHA25491003[.]exe | Triage

Sharing

General

Target

DRAFT DOCS RSHA25491003.exe
Size

639KB
MD5

018a61de9db2f306e6235fba720df9ac
SHA1

a41e0389beb2ef984fa11a573fd213d935f82167
SHA256

e95d5046970872f51ad1d86cef75cf697d06f3a6b16515aa2eef09f9145e5ef6
SHA512

7a7549e55e296db79ffdbf8272d8c6e9ed6d55cdd9527185cc26675ab432452ed80f3cc2af2679b45c16f63e3cfba681be71df456a2816651f89f1ef8342b057
SSDEEP

12288:qFpE7taI01xI7RD+EM23a1UtSDHt7TwlMG+iaYIyrmAua5W:+H10RRVNuHtXVG+ijZrvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DRAFT DOCS RSHA25491003.exe

Files

DRAFT DOCS RSHA25491003.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iSHc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ