KCS20240042- cutoms clearance doc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KCS20240042- cutoms clearance doc.exe
Size

707KB
MD5

3409ec31554197607ea779cd7f47f3d9
SHA1

ad173059b47acf68ac5973fd4a52f2e5738848bd
SHA256

192efbc5cc7eab49c2a435ec3cfb87d3282d184fdf4f56eb999d2f67a37b1b01
SHA512

63efbaefb338f9ba89e515403846cb865b344685e8ca9d6ca89b0c55694cd52eac54808c946b078e07e4a40499abdfd9475581b63711b528a62bd961e7409ddb
SSDEEP

12288:JRIB1oVeon7EL1HXh0qCAIRjLh8oVzK7IpcLYbCsWO19S17PnkjARhT0h:JRqo5OJx0qCAqjrVSLYlJWv3q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KCS20240042- cutoms clearance doc.exe

Files

KCS20240042- cutoms clearance doc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ezOQ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 705KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ