z40DOC_SCANDOCUMENT27[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

z40DOC_SCANDOCUMENT27.exe
Size

703KB
MD5

2d62bc45fdb61f802129df3fd20c0b47
SHA1

470eeed18bf1a81330d70fca79b703de5f01ee52
SHA256

b9c32503cf6bec98309ff478eb98b3318459280a8c6484121a5902f4d6502002
SHA512

70ed865f7e8aed495832976b123ef48c0b3da49320ea77230adfb1276994037268cbdaf4af3188e88efc7d9c18aae1042819762560c4036a1004070c812908b3
SSDEEP

12288:roW0BUTnCiwyEQXZc4qG7gBYnrWknghajy/MNS17kjgYMpMvRgFRQ7qn0gQJ2R8:ro9U7wyEQeLBYrihajyf1obMyGTxdQJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
z40DOC_SCANDOCUMENT27.exe

Files

z40DOC_SCANDOCUMENT27.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

xVVg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 701KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ