SI HE Voy - TC Relet 11[.]docx[.]scr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SI HE Voy - TC Relet 11.docx.scr.exe
Size

671KB
MD5

e45d4600131cf00689bb13af70c70c13
SHA1

be3911f3272494411f2cb119eccfe5c444c09c61
SHA256

fcb4c6602aeea8229338eab9ed2deb97c27e07601791ef19c7e43a830079e416
SHA512

783584018ee7904e06ede5944c21036928554b7894e32c005994b2adc37520fe8378c3f6b5711124966ab9a515fccb69c46e73702437d7ea1de17a904bbb986a
SSDEEP

12288:qAL5YVK+orvwYo9tHiIRi+ksmjELgWhuNFxcCkadXbbHzt08SnS2OHalFep9AH2:qg51+ZXHKYLgJxFk0XHT1+S2JlFepS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SI HE Voy - TC Relet 11.docx.scr.exe

Files

SI HE Voy - TC Relet 11.docx.scr.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 662KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ