Overview

overview

10

Static

static

3

Document#.exe

windows7-x64

10

Document#.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Document#.exe

  • Size

    869KB

  • MD5

    4f762156a966f4cd24b41c6fa3dcaa12

  • SHA1

    d7df3aafb76c00928e3dac2db2b5ab9b383f9146

  • SHA256

    dbd18db30b53e23bf5b6385264a66d146164e02fd81d97d47bed98cdb4898f6a

  • SHA512

    3d41498d593df3dfa3c1b84fb9e3859c38a7f6e8bb18f9b25bcbb21f3a71ce52835888628569760dac0b52f1143c0d0b122896a75d45f22e462dc4103bb4638f

  • SSDEEP

    12288:LQQUntE1EKOwtg4WsLsmTk9fLN+cEKPZ/aUfqWARW8coiKEfVr4oeVz6Ao:juC1EKOqg4ZsmTafLUcXZLCrlcos8nq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • Document#.exe
    .exe windows:4 windows x86 arch:x86

    b40f29cd171eb54c01b1dd2683c9c26b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    8c8a576201f68de1a3f26fc723b9f30f


    Headers

    Imports

    Exports

    Sections

  • Thomsens.Tra
  • Ungamboled.ove
  • bedspread.non
  • frerret.txt
  • millionsen.zer