Overview

overview

10

Static

static

3

Shipping docs.exe

windows7-x64

10

Shipping docs.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c37df8bf4f5423e91d4f654f53e4c73429172e8212f9aaaa1875e5bbf35c4d6d

  • Size

    575KB

  • MD5

    1507ff7a50f7f33c65c91bb610b2257a

  • SHA1

    add42e4d1ee50b6fa0484c35c61cbe84028fe9bd

  • SHA256

    c37df8bf4f5423e91d4f654f53e4c73429172e8212f9aaaa1875e5bbf35c4d6d

  • SHA512

    83e1a8a0fb497d1a0f71d2f8e2d0965ef30732ac40ee88a2f8f2d15bd2db64ae056f5fcb457f18fb55fe95fc762da76d9daa3bf0ae77629a6cfec669f80bf33f

  • SSDEEP

    12288:+6g0eth6/ig3fwGaWCOs7BKvLc2Leko5m3nnplhbOQ2X4br5lDf8IGvyY:+6Ith6/ig3VaWpvLxOm3nnplvqmD1Gvz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • c37df8bf4f5423e91d4f654f53e4c73429172e8212f9aaaa1875e5bbf35c4d6d
    .zip
  • Shipping docs.exe
    .exe windows:4 windows x86 arch:x86

    59a4a44a250c4cf4f2d9de2b3fe5d95f


    Headers

    Imports

    Sections

  • Glossectomy/Lenticulas.nyb
  • Glossectomy/Livsforsikringssummers.acc
  • Glossectomy/Ophavsrettigheds.txt
  • Glossectomy/Serrifera.sto
  • Glossectomy/undre.pro
  • Hjelmkldtes/Antesunrise.Ski
  • Hjelmkldtes/Berloque34.urb
  • Hjelmkldtes/Cerebrogalactose140.Mae