Document_081924[.]exe | Triage

Sharing

General

Target

Document_081924.exe
Size

893KB
MD5

25eda71533ca895778490e5a781262d5
SHA1

f70fa5e1ffe7ebaaf010eb5a4738edeb158fcc4e
SHA256

8f81ed1c250530c6a24f60a8f0c39f48bd2c98f08e6100bc8f844fc3a53c6909
SHA512

af56bbbdd2b7d155f5bf9eb4bedf942a4b25d40ecf2c813cd8cd505dac1bfa9cb9667701e8381d159571a96d812708f39d7aedc1c769a36e2e99fabaf322d79a
SSDEEP

24576:bVQ6h1O5uFbFQp75Iy2fxnYO6P+KlHRkoQPm:hQ8suhFQp25nYJ+gkox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Document_081924.exe

Files

Document_081924.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hVBZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 879KB - Virtual size: 879KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ