Doc Inv & Packing list 04015032024[.]exe | Triage

Sharing

General

Target

Doc Inv & Packing list 04015032024.exe
Size

1007KB
MD5

3fdac5be870ce5d0c30c06854203624a
SHA1

616317b2de7a62935c0630439b4bd884e8c79f3e
SHA256

66e4e0b05fbe673afbd9f23ada369eaab823c2ce0285b5004068d6b03e3449e7
SHA512

686fb0dcd723a1fe005b8d4f0e1d014caf1a9b7eebceffd75b48949f7fce3a32457d215fbbe0d65ef69c98a52b0190cc8feaf90b363cae7ee311344aba7342a9
SSDEEP

12288:UJ4NBFTi6/LSqFb4R7u59FSIogAHpXBoftbQleal:a4NH/LScb4Vu5aIogIpXe6lea

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Doc Inv & Packing list 04015032024.exe

Files

Doc Inv & Packing list 04015032024.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

odpr.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1005KB - Virtual size: 1004KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ