03062024_1552_03062024_doc024030661507[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03062024_1552_03062024_doc024030661507.exe
Size

907KB
MD5

20ddc5dfe5c14d2846aa5862acf20a4f
SHA1

3a37c924b272835c253bea08c0570d1a02e263cf
SHA256

4b5e87cc2c9d2f72a63f420deb16beb797512ea5c7143a064461ba5a79ae3f00
SHA512

57c03c4d0671a411b2051b147ee4b83a5afecb9ec4b7bf7d874f284bc2ebd7cc8fb61445e8f92f7fcd6dcd8b8bca9de52e224d23ed6ceffe54cf5c9d12f4f37f
SSDEEP

6144:kwRkLQVNpLhhay62nCudQmzP5l9JgYEAXJXbAXAGXeJ8cLcYcHFXXvQXX0XXJJkv:kg9+jRrd67ZL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03062024_1552_03062024_doc024030661507.exe

Files

03062024_1552_03062024_doc024030661507.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WTRCB6667.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 905KB - Virtual size: 904KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ