LETTER-PROFORMA-APPOINTMENT-DOCX[.]exe | Triage

Sharing

General

Target

LETTER-PROFORMA-APPOINTMENT-DOCX.exe
Size

695KB
MD5

dc5efebad778fed9a844ef6faef4d156
SHA1

0708cdc4ebb6225dfe99b4dee80a2513760583ab
SHA256

293ba40b1cb108c5d5f6f069bafe89cfbf1e970efaf82020dbf25992102948a0
SHA512

9e371d298c345fc7333ff6eea8720fbb3c05e76718197d44068cdcaec09f5c79abed709f9381222cdc25f57b4ea72086bad83297ce7cc9529538105a15d0a2e7
SSDEEP

12288:vNi8LkpEa+4hzx/HQZaJSDQOk8mekzq7R0N5wJRHT41OIm2/lzXMz5I1ntc3DZ2M:AjEI/HgaJSnZOzvuHT4oIN5ei1n4n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
LETTER-PROFORMA-APPOINTMENT-DOCX.exe

Files

LETTER-PROFORMA-APPOINTMENT-DOCX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ