Static task
static1
Behavioral task
behavioral1
Sample
sscan document_doc.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
sscan document_doc.exe
Resource
win10v2004-20240426-en
General
-
Target
sscan document_doc.exe.exe
-
Size
3.4MB
-
MD5
f2d15e59eba18374eb35098e4e460a3d
-
SHA1
54572c44c5835ffa1e8a331c76f4b38f9e775c7f
-
SHA256
c3c08271d1ebc069e92c3357769d962d3b086e1a85e0b00fb426bb7d80b93d16
-
SHA512
e649a2745114a37aafa982c579767b63a51d2420e71ee71dad18c54841fa5d33745ae72f2ae0e910afdd05f542cc50adcf97108b0b98d7700bcb9687e391e4dc
-
SSDEEP
49152:Jp98Mq2HVhpqDD1yWi/yLZCxo5zkJB0r42PRn7wPO0/rNcLH+M2/o2ejWExVX5V:JR1hIiqJwqBiPIRS6X5V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sscan document_doc.exe.exe
Files
-
sscan document_doc.exe.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ